Static task
static1
Behavioral task
behavioral1
Sample
de1f650e7e589ff2bd64c61e5a119798db861d028007bfa4b91627d552ab4d76.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de1f650e7e589ff2bd64c61e5a119798db861d028007bfa4b91627d552ab4d76.exe
Resource
win10v2004-20221111-en
General
-
Target
de1f650e7e589ff2bd64c61e5a119798db861d028007bfa4b91627d552ab4d76
-
Size
9KB
-
MD5
709babda91ad3e01789cd7ec7b202589
-
SHA1
6c5eb28f87e21159a2e62b0cefaaa969e81f57a9
-
SHA256
de1f650e7e589ff2bd64c61e5a119798db861d028007bfa4b91627d552ab4d76
-
SHA512
169fd8271194b64c48bd49f5e7d072e19a065e4bf898eb480286c0be4faa93624de6efb35fddd6bef0a122e846cc8a55422e47898900a7ca04917f5ccecce51d
-
SSDEEP
192:7xIx+ewavGBInJiQDp61ULqhA96sLpcYer9mA/:FIIU1nb16ccYeN/
Malware Config
Signatures
Files
-
de1f650e7e589ff2bd64c61e5a119798db861d028007bfa4b91627d552ab4d76.exe windows x86
ce57ad56cd04f76e12130d8f994738ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
SetTimer
SendMessageA
RegisterClassExA
PostQuitMessage
OpenClipboard
KillTimer
GetWindowTextA
GetMessageA
GetForegroundWindow
GetClipboardData
GetClassNameA
FindWindowExA
FindWindowA
DispatchMessageA
DefWindowProcA
CreateWindowExA
CloseClipboard
wsprintfA
shell32
ShellExecuteA
kernel32
GetStartupInfoA
GetVolumeInformationA
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
WriteFile
WinExec
TerminateProcess
SystemTimeToFileTime
Sleep
SetFilePointer
ReadFile
LoadLibraryA
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetTickCount
GetWindowsDirectoryA
CloseHandle
CompareStringA
CreateDirectoryExA
CreateFileA
CreateProcessA
CreateThread
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemTime
GetSystemDirectoryA
wsock32
inet_ntoa
gethostname
WSAStartup
gethostbyname
wininet
InternetGetConnectedState
FindNextUrlCacheEntryA
DeleteUrlCacheEntryA
FindFirstUrlCacheEntryA
urlmon
URLDownloadToFileA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE