Static task
static1
Behavioral task
behavioral1
Sample
b56fa62077effb029e68b9127fb4fd176dedba355e83834f391fcd937a4b0822.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b56fa62077effb029e68b9127fb4fd176dedba355e83834f391fcd937a4b0822.exe
Resource
win10v2004-20220812-en
General
-
Target
b56fa62077effb029e68b9127fb4fd176dedba355e83834f391fcd937a4b0822
-
Size
20KB
-
MD5
c6977177d4ae9433b6601083a4720f1c
-
SHA1
35cee18863c5dc7231ec579bd4984b7091e6208c
-
SHA256
b56fa62077effb029e68b9127fb4fd176dedba355e83834f391fcd937a4b0822
-
SHA512
e0ba895a845f9cd6317842ecae9958b3e0c6b3a5006e72eb58b4d9fb78c61529903c53b37c0dc9a440dd688d96e2f08dc38541b013fe740da112f7f1ff14048e
-
SSDEEP
96:/rdfuEpS8Yvlr+R13xwDuRELT9aS5PtboynJI++tfRC8B3LLu:cL8+R+R13xuB9P1oynJI++NRs
Malware Config
Signatures
Files
-
b56fa62077effb029e68b9127fb4fd176dedba355e83834f391fcd937a4b0822.exe windows x86
c361def5d8d71daf991e6576f34173ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadStringA
msvcrt
__p__fmode
__set_app_type
fclose
__p__commode
_controlfp
strchr
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
fopen
fwrite
??2@YAPAXI@Z
atoi
??3@YAXPAX@Z
sprintf
_except_handler3
kernel32
Sleep
GetTempFileNameA
DeleteFileA
CreateProcessA
CloseHandle
GetTempPathA
GetModuleHandleA
GetModuleFileNameA
GetStartupInfoA
advapi32
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ