Static task
static1
Behavioral task
behavioral1
Sample
b69eaad565bfcddb3b77c894e9b875eb1b960ec72e38ba5b6593c4ebe06d4c8a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b69eaad565bfcddb3b77c894e9b875eb1b960ec72e38ba5b6593c4ebe06d4c8a.exe
Resource
win10v2004-20221111-en
General
-
Target
b69eaad565bfcddb3b77c894e9b875eb1b960ec72e38ba5b6593c4ebe06d4c8a
-
Size
24KB
-
MD5
f6aded39e78c5793f9618e2252ef8695
-
SHA1
6dd5e5704bb1b24481fac1eff7b024a92b5a967f
-
SHA256
b69eaad565bfcddb3b77c894e9b875eb1b960ec72e38ba5b6593c4ebe06d4c8a
-
SHA512
107449fc1cd9b6590030abc9aa2daac65ae8ba1cf4bb831c106e6e10c8ff700c8af84d9950918baebbc572f642ed7512a2a48e2c35dfff21ef6f0a81f8b68b6f
-
SSDEEP
384:va+S0GPf8CxjypKPUa1hECAlACFCp2SCQphEcNjk:DCxjyyUaTP0ACFCp2SxNI
Malware Config
Signatures
Files
-
b69eaad565bfcddb3b77c894e9b875eb1b960ec72e38ba5b6593c4ebe06d4c8a.exe windows x86
fcc453306e93385e7cd3712782f4dcf7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
inet_addr
wininet
InternetCloseHandle
InternetOpenA
HttpSendRequestA
HttpOpenRequestA
InternetReadFile
InternetConnectA
HttpQueryInfoA
iphlpapi
GetAdaptersInfo
advapi32
LsaQueryInformationPolicy
LsaFreeMemory
LsaClose
LsaOpenPolicy
dnsapi
DnsQuery_A
shlwapi
SHGetValueA
SHSetValueA
ntdll
strstr
atoi
sprintf
tolower
strncmp
wcsstr
_snprintf
kernel32
GetVersionExA
GetProcessHeap
HeapFree
Sleep
MultiByteToWideChar
HeapReAlloc
HeapAlloc
ExitThread
GetTickCount
WideCharToMultiByte
ole32
OleUninitialize
OleInitialize
CoCreateInstance
oleaut32
VariantInit
SysFreeString
SysAllocString
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE