Static task
static1
Behavioral task
behavioral1
Sample
c6ee86349ab0fb57a1e8e9331092f80f9cd8d67abce1060d8bda89170da37ff6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c6ee86349ab0fb57a1e8e9331092f80f9cd8d67abce1060d8bda89170da37ff6.exe
Resource
win10v2004-20220812-en
General
-
Target
c6ee86349ab0fb57a1e8e9331092f80f9cd8d67abce1060d8bda89170da37ff6
-
Size
20KB
-
MD5
4845e11577bfe66fc34182010abfb444
-
SHA1
89401d10750f8d913bfea1843a8f6a061479f7ac
-
SHA256
c6ee86349ab0fb57a1e8e9331092f80f9cd8d67abce1060d8bda89170da37ff6
-
SHA512
cfb7a536c05ba7196ed4e616dcfe009e943571a531ffc5e563794941563a49764300b81a1678c8520bffbc26ad37a4ec96325c385c59e3592217cd261c473b8d
-
SSDEEP
192:wQjMdfhyxdn0nTnFY4HAQsP1oyH999w9TqQ9Z1:4tId0K4HAZ1nvaT
Malware Config
Signatures
Files
-
c6ee86349ab0fb57a1e8e9331092f80f9cd8d67abce1060d8bda89170da37ff6.exe windows x86
2a259a917384eb37be66f0d1689a1af8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
CreateFileA
WriteFile
CloseHandle
GetStartupInfoA
GetModuleHandleA
advapi32
RegSetValueExA
RegOpenKeyA
RegCreateKeyA
RegCloseKey
shell32
SHGetSpecialFolderPathA
wininet
InternetCloseHandle
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
HttpQueryInfoA
InternetOpenA
msvcrt
islower
??2@YAPAXI@Z
??3@YAXPAX@Z
_except_handler3
_controlfp
isxdigit
isupper
isspace
ispunct
isprint
isgraph
isdigit
sprintf
__p__fmode
atol
_acmdln
__set_app_type
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ