Static task
static1
Behavioral task
behavioral1
Sample
f6711d9c65bd227137d1c6cd90f9e5cfab99192c40b5f603c6a5822917bf2a6f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f6711d9c65bd227137d1c6cd90f9e5cfab99192c40b5f603c6a5822917bf2a6f.exe
Resource
win10v2004-20221111-en
General
-
Target
f6711d9c65bd227137d1c6cd90f9e5cfab99192c40b5f603c6a5822917bf2a6f
-
Size
14KB
-
MD5
8bd1ea620f2147009327cd3660c11d1b
-
SHA1
716ac0b9ef3f4c374e38e8ed5a4204311b7d0c3b
-
SHA256
f6711d9c65bd227137d1c6cd90f9e5cfab99192c40b5f603c6a5822917bf2a6f
-
SHA512
ea1c34a7abe727e0b7e0e76f084aa489e114063d6272d84465a0a7a059a438832794912b9c78f6f52b8690d4c4fc290eeecec9d465a1d75bb15cef088688c9b4
-
SSDEEP
192:04WBF+V1D6Ps1xp+Eg/f9NhX1rq8r/pYk6tqoziTz1R:fWBF+zDws9+ZtrqIYkUqWiFR
Malware Config
Signatures
Files
-
f6711d9c65bd227137d1c6cd90f9e5cfab99192c40b5f603c6a5822917bf2a6f.exe windows x86
9eba862f82afd8db96ba29086b6e96ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
wininet
HttpQueryInfoA
InternetOpenA
InternetOpenUrlA
InternetReadFile
advapi32
RegOpenKeyExA
RegQueryValueExA
kernel32
CloseHandle
CreateFileMappingA
CreateProcessA
CreateThread
ExitProcess
FindResourceA
FormatMessageA
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetTempPathA
HeapFree
LoadLibraryA
LoadResource
LockResource
MapViewOfFile
OpenProcess
SizeofResource
Sleep
UnmapViewOfFile
WaitForSingleObject
_lclose
_lcreat
_lwrite
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
comctl32
InitCommonControls
user32
DialogBoxParamA
EndDialog
GetDlgItem
LoadStringA
MessageBeep
MessageBoxA
PostMessageA
SendDlgItemMessageA
SetDlgItemTextA
SetForegroundWindow
SetWindowTextA
ShowWindow
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ