Static task
static1
Behavioral task
behavioral1
Sample
c27b5c1b16ee18104617edc5162cd3a0a1d1abb3d7b69ab97b6d98709adc3061.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c27b5c1b16ee18104617edc5162cd3a0a1d1abb3d7b69ab97b6d98709adc3061.exe
Resource
win10v2004-20221111-en
General
-
Target
c27b5c1b16ee18104617edc5162cd3a0a1d1abb3d7b69ab97b6d98709adc3061
-
Size
28KB
-
MD5
994295b42fdf4ad19b4ef07fd554d38e
-
SHA1
b995cb43afcfd3ed62f72d17189c8c724ab3a838
-
SHA256
c27b5c1b16ee18104617edc5162cd3a0a1d1abb3d7b69ab97b6d98709adc3061
-
SHA512
5be93282d22888bd8d9aad185c15c3e53b71e42b193d3630df98166495d3e84f01004efc07738d4b5579cd8d446809dd28b52667b16aeca7f058e63dd3e18bde
-
SSDEEP
384:JpV4p11tIFDb+1tJhMDb+xwm2UT74yTD2nY4RvrT2QemWd1R0Hu:Jz4n4bQtAb+xwKRiY41T2QexRi
Malware Config
Signatures
Files
-
c27b5c1b16ee18104617edc5162cd3a0a1d1abb3d7b69ab97b6d98709adc3061.exe windows x86
cb93a3e5a7756040a94c889504fec273
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetConnectA
InternetOpenA
InternetQueryOptionA
HttpQueryInfoA
HttpSendRequestA
InternetSetOptionA
HttpOpenRequestA
InternetCloseHandle
kernel32
GetCurrentDirectoryA
GetStartupInfoA
WaitForSingleObject
CloseHandle
Sleep
WriteFile
SetFilePointer
GetComputerNameA
CreateFileA
TerminateProcess
GetVersionExA
GetTickCount
ReadFile
CreatePipe
GetModuleHandleA
CreateProcessA
GetLastError
OutputDebugStringA
PeekNamedPipe
GetProcAddress
advapi32
GetUserNameA
msvcrt
_stricmp
_initterm
_acmdln
free
calloc
strchr
__getmainargs
_except_handler3
__setusermatherr
time
_exit
_XcptFilter
strstr
_controlfp
srand
exit
atoi
_adjust_fdiv
__p__commode
rand
vsprintf
__set_app_type
_strnicmp
__p__fmode
_strlwr
sprintf
isspace
ws2_32
WSACleanup
inet_addr
gethostbyname
WSAStartup
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ