Static task
static1
Behavioral task
behavioral1
Sample
b9c60d9f1c3b7269680103398751e3ef5683dfc6296884b5101e8fa6427c0251.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b9c60d9f1c3b7269680103398751e3ef5683dfc6296884b5101e8fa6427c0251.exe
Resource
win10v2004-20220901-en
General
-
Target
b9c60d9f1c3b7269680103398751e3ef5683dfc6296884b5101e8fa6427c0251
-
Size
24KB
-
MD5
9b6f3745bbbbd8b0ef02d5934566a8b0
-
SHA1
721c50f0c8ce483864dff1dfbb4c37985664267f
-
SHA256
b9c60d9f1c3b7269680103398751e3ef5683dfc6296884b5101e8fa6427c0251
-
SHA512
6fafedbe077f7118afc50a1362871ad8d52b921c0ac0d2148bf936ea907e3562c4966e38958862b434adba238ea0abb942d2d2a33735342399491338c308279c
-
SSDEEP
384:ETnUTK0X6ONPzxodtrkGbpDAjch1VQEm0C7mVEYDa5LtNR7OgRS7W:fKA6GxoLtbZAjcN7mPPOgRS7W
Malware Config
Signatures
Files
-
b9c60d9f1c3b7269680103398751e3ef5683dfc6296884b5101e8fa6427c0251.exe windows x86
b2c94e1b8e58178c15126b390abe2e96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
HttpQueryInfoA
InternetReadFile
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
InternetErrorDlg
advapi32
InitializeSecurityDescriptor
RegOpenKeyExA
GetUserNameA
RegQueryValueExA
RegCloseKey
SetSecurityDescriptorDacl
user32
PostThreadMessageA
GetMessageA
GetDesktopWindow
msvcrt
atoi
malloc
exit
fclose
getc
fopen
strrchr
sprintf
_sleep
__CxxFrameHandler
fwrite
strtok
fprintf
strncmp
strstr
free
_strdup
fscanf
strncpy
_snprintf
realloc
_except_handler3
fflush
_filelength
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
iphlpapi
GetAdaptersInfo
shlwapi
PathFileExistsA
kernel32
GetCurrentThreadId
GetLastError
GetComputerNameA
GetProcAddress
GetModuleHandleA
DeleteFileA
GetStartupInfoA
Sleep
GetModuleFileNameA
CreateMutexA
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE