Static task
static1
Behavioral task
behavioral1
Sample
66b483c58b3be29c06abd2ce25d37959f5f0b6868d421d5a47a575be9fe134b2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
66b483c58b3be29c06abd2ce25d37959f5f0b6868d421d5a47a575be9fe134b2.exe
Resource
win10v2004-20220812-en
General
-
Target
66b483c58b3be29c06abd2ce25d37959f5f0b6868d421d5a47a575be9fe134b2
-
Size
15KB
-
MD5
1a7c90fde4af81c314cd3e0a4ecde670
-
SHA1
c599f7967433a7141b52f0a901b3a2ac4c2b3811
-
SHA256
66b483c58b3be29c06abd2ce25d37959f5f0b6868d421d5a47a575be9fe134b2
-
SHA512
1d79911228645bcd2c05bbb9d69e8560ce614172f03b2ee91ecf42face3ac1fa897cd66d7f7fff302f6c3cb1c38f5483e255a8621c81353dca986929a6dbf648
-
SSDEEP
192:KYu7Q742zE771t82NNufyf1Vh4OT2FAaQB0/cUO7d8SREAzzu:q7Q74cM1tBNNc4VBXBead8SRE0zu
Malware Config
Signatures
Files
-
66b483c58b3be29c06abd2ce25d37959f5f0b6868d421d5a47a575be9fe134b2.exe windows x86
8d1c31cc671b3a7ef9749fa137a3f728
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCloseHandle
InternetGetConnectedState
InternetOpenA
InternetOpenUrlA
InternetReadFile
HttpQueryInfoA
shell32
Shell_NotifyIconA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
kernel32
ExpandEnvironmentStringsA
FreeLibrary
GetCommandLineA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
CloseHandle
LoadLibraryA
CopyFileA
LocalAlloc
LocalFree
MultiByteToWideChar
ReadFile
RtlUnwind
RtlZeroMemory
CreateFileA
Sleep
WinExec
WriteFile
lstrcpyA
user32
SetTimer
KillTimer
LoadIconA
MessageBoxA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
RegisterClassA
PostQuitMessage
CreateWindowExA
DefWindowProcA
advapi32
RegCreateKeyA
RegCreateKeyExA
RegCloseKey
RegFlushKey
RegSetValueExA
crtdll
_itoa
__GetMainArgs
abort
exit
free
malloc
raise
signal
strcat
strchr
strcmp
strncpy
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 512B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE