Static task
static1
Behavioral task
behavioral1
Sample
832447bad34536effa9918296d7f51842595c724c8b6ce278d95de1cc5e32f3b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
832447bad34536effa9918296d7f51842595c724c8b6ce278d95de1cc5e32f3b.exe
Resource
win10v2004-20220812-en
General
-
Target
832447bad34536effa9918296d7f51842595c724c8b6ce278d95de1cc5e32f3b
-
Size
36KB
-
MD5
066751d680a1ffaa4169854a6f463540
-
SHA1
c3076810e6224aadab8c406591fcac7c0d5e15eb
-
SHA256
832447bad34536effa9918296d7f51842595c724c8b6ce278d95de1cc5e32f3b
-
SHA512
e95e5128265274113139337d1161622c42287bce0d6204d38cee094d8decb862b81aba344e64f1db2e31fdb1d0ad9588154104a3236f4dd417d28d7cb05dde1d
-
SSDEEP
384:MVkExOWNFCdWToqnDDGLy9BapIZyoGfaS9Egl:IkEVNkjQpMpIZnGfVugl
Malware Config
Signatures
Files
-
832447bad34536effa9918296d7f51842595c724c8b6ce278d95de1cc5e32f3b.exe windows x86
42a25ce54497c151ac85a08500981a9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileA
kernel32
GetEnvironmentStringsW
GetStringTypeA
CloseHandle
GetFileSize
CreateFileA
MoveFileA
DeleteFileA
lstrcatA
GetTempFileNameA
GetTempPathA
LCMapStringW
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
shell32
ShellExecuteA
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE