Static task
static1
Behavioral task
behavioral1
Sample
a6bf388848a2b404332a3d30c3f613db171bbea0781f4f5ca0d58f2b4fc425bf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6bf388848a2b404332a3d30c3f613db171bbea0781f4f5ca0d58f2b4fc425bf.exe
Resource
win10v2004-20220812-en
General
-
Target
a6bf388848a2b404332a3d30c3f613db171bbea0781f4f5ca0d58f2b4fc425bf
-
Size
116KB
-
MD5
a216f077cac17604e9bee89e993dcc58
-
SHA1
02a57479268fe536ecffc9a29e528b6f55cfd883
-
SHA256
a6bf388848a2b404332a3d30c3f613db171bbea0781f4f5ca0d58f2b4fc425bf
-
SHA512
6417f22639e2a6ac1d555d263a8241196a6bd88143e10330c49318558c99b6ca212c2412aefe9c8475df93ba4d555b42f0f18a06c2b4d1d799b9321864fe5958
-
SSDEEP
3072:yHWaGzwp7W9ePaPIPP1O06fkVXciAUQl/dpIEuu:Jgp7gwaPIVO0JV1/Qp
Malware Config
Signatures
Files
-
a6bf388848a2b404332a3d30c3f613db171bbea0781f4f5ca0d58f2b4fc425bf.exe windows x86
c3d4cd4363df6e1edd59df0568c224f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
_adjust_fdiv
shfolder
SHGetFolderPathA
ole32
CLSIDFromString
user32
IsWindow
gdi32
GetDeviceCaps
shell32
Shell_NotifyIconA
urlmon
URLDownloadToFileA
lz32
LZOpenFileA
wininet
InternetCrackUrlA
version
VerQueryValueA
shlwapi
StrToIntExA
oleaut32
VariantClear
advapi32
RegCloseKey
Sections
.text Size: 107KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE