Static task
static1
Behavioral task
behavioral1
Sample
6c2d656aefdda064589325ff6d53a81d0ecb98df30f800ce80a048a42f423196.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6c2d656aefdda064589325ff6d53a81d0ecb98df30f800ce80a048a42f423196.exe
Resource
win10v2004-20221111-en
General
-
Target
6c2d656aefdda064589325ff6d53a81d0ecb98df30f800ce80a048a42f423196
-
Size
1.4MB
-
MD5
fa5807ac4abfbbbf638a4c9a3d7d38fe
-
SHA1
29c6b28b8cb0ca452a36b1cc1919b1a96b4baa7a
-
SHA256
6c2d656aefdda064589325ff6d53a81d0ecb98df30f800ce80a048a42f423196
-
SHA512
d73b6dc1d84ef6409e9b2e20bf6750f4e4819270fdffde3aca22618e808f7d061e8a768aeded9a60c65b1af25d6fc0196c42506cd74d45885d861977c237af8a
-
SSDEEP
192:BVoN21IUPw3XM22dNQOO0Vb8eCxgK9zHJtQi9pmP1oyn/T7:wN4xn8VyKxQi9pQ1RP
Malware Config
Signatures
Files
-
6c2d656aefdda064589325ff6d53a81d0ecb98df30f800ce80a048a42f423196.exe windows x86
b692b0a21b34be7c398957198c9983f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
CloseHandle
CreateProcessA
DeleteFileA
GetModuleFileNameA
GetSystemTime
GetWindowsDirectoryA
ExitProcess
CopyFileA
CreateThread
Sleep
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyA
msvcrt
fwrite
fopen
sprintf
fclose
srand
time
fread
fseek
fscanf
fputs
fgets
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??3@YAXPAX@Z
rand
wininet
InternetCloseHandle
InternetOpenA
InternetReadFile
InternetOpenUrlA
winmm
timeGetTime
netapi32
Netbios
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE