Static task
static1
Behavioral task
behavioral1
Sample
e6b8310c860a1ac5c43cfd15728d58cb107f185506eb8d9a690e485f95bf94c4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6b8310c860a1ac5c43cfd15728d58cb107f185506eb8d9a690e485f95bf94c4.exe
Resource
win10v2004-20221111-en
General
-
Target
e6b8310c860a1ac5c43cfd15728d58cb107f185506eb8d9a690e485f95bf94c4
-
Size
28KB
-
MD5
2e4e83b1f2d9088d7dc1be7859f62148
-
SHA1
e15e47acfdc800bb302504a76e0257336b7e2788
-
SHA256
e6b8310c860a1ac5c43cfd15728d58cb107f185506eb8d9a690e485f95bf94c4
-
SHA512
8048e8376474a6a0afb6d3b51b3c12ce58e2905745fce73e21e32d14b81cc632eae21171da715b88fe024bb0385fcc9b7a736f87fdd0543d875a9bf1cd30f827
-
SSDEEP
384:33+mn5tB5Hi1ez9yEltHuove8D2hqGZHHmh7318w:3ZZi1eZyElQS28GZnmh7l8w
Malware Config
Signatures
Files
-
e6b8310c860a1ac5c43cfd15728d58cb107f185506eb8d9a690e485f95bf94c4.exe windows x86
29f51570331f89187c4039642ae85d2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcp60
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Xlen@std@@YAXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
kernel32
FindResourceA
LoadResource
LockResource
SizeofResource
Sleep
GetModuleFileNameA
GetWindowsDirectoryA
CloseHandle
TerminateProcess
OpenProcess
Process32NextW
CreateToolhelp32Snapshot
DeleteFileA
SetFileAttributesA
WinExec
WriteFile
ExitProcess
CreateFileA
wininet
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
msvcrt
__dllonexit
wcscmp
_onexit
fclose
fwrite
fopen
__CxxFrameHandler
free
??2@YAPAXI@Z
user32
MessageBoxA
advapi32
RegOpenKeyExA
RegSetValueExA
RegCloseKey
Sections
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ