Static task
static1
Behavioral task
behavioral1
Sample
0d5f994c47832ad19f99f49e36a713c2dd3db1577a37955747569210fb8bd24c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0d5f994c47832ad19f99f49e36a713c2dd3db1577a37955747569210fb8bd24c.exe
Resource
win10v2004-20220901-en
General
-
Target
0d5f994c47832ad19f99f49e36a713c2dd3db1577a37955747569210fb8bd24c
-
Size
14KB
-
MD5
a6fd2d5de63e2e5fd79d10d24392a771
-
SHA1
7e9b1cc4918d12ca7a465e506a146746c6ba3189
-
SHA256
0d5f994c47832ad19f99f49e36a713c2dd3db1577a37955747569210fb8bd24c
-
SHA512
ce986e04906599c13fec1178b831a2d9ceea69698034c5ebf51a3d4fced5c8aae36fa8a2d53dc025fe4348147fb9a4a7dc65c6bdc8a9045c0bffe6249051dbce
-
SSDEEP
192:0UF+V1D6Ps1xp+Eg/f9NhX1rq8O/pYk6tqorbiz1R:BF+zDws9+ZtrqRYkUqu4R
Malware Config
Signatures
Files
-
0d5f994c47832ad19f99f49e36a713c2dd3db1577a37955747569210fb8bd24c.exe windows x86
9eba862f82afd8db96ba29086b6e96ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
wininet
HttpQueryInfoA
InternetOpenA
InternetOpenUrlA
InternetReadFile
advapi32
RegOpenKeyExA
RegQueryValueExA
kernel32
CloseHandle
CreateFileMappingA
CreateProcessA
CreateThread
ExitProcess
FindResourceA
FormatMessageA
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetTempPathA
HeapFree
LoadLibraryA
LoadResource
LockResource
MapViewOfFile
OpenProcess
SizeofResource
Sleep
UnmapViewOfFile
WaitForSingleObject
_lclose
_lcreat
_lwrite
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
comctl32
InitCommonControls
user32
DialogBoxParamA
EndDialog
GetDlgItem
LoadStringA
MessageBeep
MessageBoxA
PostMessageA
SendDlgItemMessageA
SetDlgItemTextA
SetForegroundWindow
SetWindowTextA
ShowWindow
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ