Static task
static1
Behavioral task
behavioral1
Sample
2219584733d48e3484a76a5d6e24ae75b8ba5867fda0f151840832e22b26fbf3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2219584733d48e3484a76a5d6e24ae75b8ba5867fda0f151840832e22b26fbf3.exe
Resource
win10v2004-20221111-en
General
-
Target
2219584733d48e3484a76a5d6e24ae75b8ba5867fda0f151840832e22b26fbf3
-
Size
11KB
-
MD5
03bb1e4a998cf5009e8dd0395cfedc93
-
SHA1
4d6b312e870f1efca63b6370b4cc321bc4ea1c91
-
SHA256
2219584733d48e3484a76a5d6e24ae75b8ba5867fda0f151840832e22b26fbf3
-
SHA512
f266fe2122d3dcd25b734f8362c1bd8b26fe83b9e5d1114112c8d4db11d342622151a91d66f24b04b7a03235616b21b2f5762daf41e742871c43797c2f0e702a
-
SSDEEP
192:l71EEVqFZquHa/MFS9SvzJQhbjpBS1mbDAVlDRCDU:l71EEsZFWoS9tTDU
Malware Config
Signatures
Files
-
2219584733d48e3484a76a5d6e24ae75b8ba5867fda0f151840832e22b26fbf3.exe windows x86
12a19b2083372a1d6dbdb5cb6d3e05b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
GetTempPathA
Sleep
GetWindowsDirectoryA
WinExec
GetModuleFileNameA
GetSystemDirectoryA
GetLastError
CreateMutexA
GetVersionExA
WaitForSingleObject
LoadLibraryA
lstrcmpiA
SetFileAttributesA
DeleteFileA
lstrcatA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetCurrentProcess
GetProcAddress
urlmon
URLDownloadToCacheFileA
advapi32
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
wininet
DeleteUrlCacheEntry
msvcp60
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
netapi32
Netbios
msvcrt
strcpy
_onexit
__dllonexit
fopen
fwrite
memcpy
memset
malloc
strchr
strlen
_stricmp
sprintf
strcat
__CxxFrameHandler
atoi
fread
fclose
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE