Static task
static1
Behavioral task
behavioral1
Sample
806ac66b72756692de0d64bd13d24b33f3b9a122bcb9c3554f5d2397eb760fba.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
806ac66b72756692de0d64bd13d24b33f3b9a122bcb9c3554f5d2397eb760fba.exe
Resource
win10v2004-20221111-en
General
-
Target
806ac66b72756692de0d64bd13d24b33f3b9a122bcb9c3554f5d2397eb760fba
-
Size
3KB
-
MD5
52febebd2e924326b132880797bdf42d
-
SHA1
f8be19436b8ece44a5e399f74dc45162daab7a63
-
SHA256
806ac66b72756692de0d64bd13d24b33f3b9a122bcb9c3554f5d2397eb760fba
-
SHA512
8ad0a3f04418af38eaaa2fb3cadcf1b591fe1f93c9f23149c50d49f88abacf3a5355f94c6d6d3b99373c837a564f08c850dedb95a0ab68db5a9f6df173810317
Malware Config
Signatures
Files
-
806ac66b72756692de0d64bd13d24b33f3b9a122bcb9c3554f5d2397eb760fba.exe windows x86
bf12b78e7e2af98c9fdd2cfbea9907b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
ws2_32
socket
send
recv
htons
gethostbyname
connect
closesocket
WSAStartup
WSACleanup
urlmon
URLDownloadToFileA
kernel32
ExitProcess
lstrcpyA
lstrcatA
WinExec
Sleep
MoveFileA
GetModuleFileNameA
Sections
.text Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE