Static task
static1
Behavioral task
behavioral1
Sample
8c6d7c066bdf1d8ff19e400f964e5c15c038946c2aea7ef71497d9b51dcd95e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8c6d7c066bdf1d8ff19e400f964e5c15c038946c2aea7ef71497d9b51dcd95e7.exe
Resource
win10v2004-20220901-en
General
-
Target
8c6d7c066bdf1d8ff19e400f964e5c15c038946c2aea7ef71497d9b51dcd95e7
-
Size
207KB
-
MD5
ef9d46ef8fe539496fb3e36ba433c4b6
-
SHA1
b11fda454850b61b26cdf43a13aa918b6a0705cb
-
SHA256
8c6d7c066bdf1d8ff19e400f964e5c15c038946c2aea7ef71497d9b51dcd95e7
-
SHA512
30ec772af730e5d442babad4a8c3fe548e3cfca54a3f6c66578b6cdb58d259e1c37a11c409ad088c380f40b2bd860d4a2036fea647b83368a6d73d76a91316d4
-
SSDEEP
3072:b68fHxbv8rgUlLwTJpCHaIk/3NMHgtNPT+TJrFc1EVhow5L9C0bVV8sk:b68fRAEUlLwTqHYfNMHqPgJjNL9Cg8x
Malware Config
Signatures
Files
-
8c6d7c066bdf1d8ff19e400f964e5c15c038946c2aea7ef71497d9b51dcd95e7.exe windows x86
a8c3e8b043d9394caff7ea1d6fbba535
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strcpy
strlen
??2@YAPAXI@Z
_time64
srand
rand
_snprintf
_access
kernel32
GetSystemDirectoryA
GetFileTime
CloseHandle
MoveFileExA
CreateFileA
SetFileTime
FindResourceA
LoadResource
LockResource
SizeofResource
WriteFile
CreateProcessA
WaitForSingleObject
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyA
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetSetCookieA
urlmon
ObtainUserAgentString
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ