Static task
static1
Behavioral task
behavioral1
Sample
b75058b04da53d6c852bcc30f6143a04b87fab63befa721c6cc88e2fc90d388f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b75058b04da53d6c852bcc30f6143a04b87fab63befa721c6cc88e2fc90d388f.exe
Resource
win10v2004-20221111-en
General
-
Target
b75058b04da53d6c852bcc30f6143a04b87fab63befa721c6cc88e2fc90d388f
-
Size
24KB
-
MD5
87b7590ea7b8af679df7d183de75c7a2
-
SHA1
7a61b77737f3d779e0dd2a43f10f5362bf76464f
-
SHA256
b75058b04da53d6c852bcc30f6143a04b87fab63befa721c6cc88e2fc90d388f
-
SHA512
74495c8f880c452ef9178d048362f2dcfae91c649d86946534ec3f9654409f37b3f73838bb0f2c80774443b55ed795386af1ef107ceee17a2bd14ef1f79589df
-
SSDEEP
384:+kNHe0jfUnXg34uJDTjaLFKj8AIWGxH/f4kVdjaLacmkC0GJsJxXSdqWoZDEWA:+9I4YT+LFKwAgxfftjaLacmkLGKddm
Malware Config
Signatures
Files
-
b75058b04da53d6c852bcc30f6143a04b87fab63befa721c6cc88e2fc90d388f.exe windows x86
8ce79d347a5ab3b2dc7cb6b771609388
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetProcAddress
LoadLibraryA
WaitForSingleObject
CreateThread
GetTempPathA
Sleep
GetWindowsDirectoryA
WinExec
GetModuleFileNameA
FreeLibrary
CreateMutexA
GetVersionExA
lstrcmpiA
SetFileAttributesA
DeleteFileA
lstrcatA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetCurrentProcess
GetSystemDirectoryA
user32
FindWindowA
urlmon
URLDownloadToCacheFileA
URLDownloadToFileA
advapi32
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
wininet
DeleteUrlCacheEntry
msvcp60
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
shell32
ShellExecuteA
msvcrt
malloc
_itoa
_onexit
__dllonexit
fopen
fwrite
fclose
fread
atoi
__CxxFrameHandler
time
strlen
memcpy
memset
_stricmp
strchr
strcpy
sprintf
strcat
localtime
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE