Static task
static1
Behavioral task
behavioral1
Sample
c6ddb22a083fe696f27395662fca2cd9586c3e3c188098b477973a81aafa6ea1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6ddb22a083fe696f27395662fca2cd9586c3e3c188098b477973a81aafa6ea1.exe
Resource
win10v2004-20220812-en
General
-
Target
c6ddb22a083fe696f27395662fca2cd9586c3e3c188098b477973a81aafa6ea1
-
Size
21KB
-
MD5
bd20b96c9022b0ed9311029d840b9e1e
-
SHA1
25a171a5beb3b1ed162697c00dad9e285f12bc2c
-
SHA256
c6ddb22a083fe696f27395662fca2cd9586c3e3c188098b477973a81aafa6ea1
-
SHA512
438963803745247fcf83789ce94b72274dd8937f85aabc26bae54cb806b5515cf4c95412db127fd859d8f8e9b55fa15aff7e681d6cb3ac8e026531e828693030
-
SSDEEP
384:/FakaDgVHC9WZJJXQYg3UnAi9D0odDOYJU0XG9w9Lo:/FaraHC6JAYNAytxRaIiw9Lo
Malware Config
Signatures
Files
-
c6ddb22a083fe696f27395662fca2cd9586c3e3c188098b477973a81aafa6ea1.exe windows x86
39f43a83cde8674b9fe64a9cfdd03553
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
strncmp
strstr
strchr
atoi
strncpy
RtlRandom
sprintf
memset
_chkstk
kernel32
GetLastError
GetSystemTime
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetLocalTime
CreateFileA
SetFilePointer
SystemTimeToFileTime
GetCurrentProcess
VirtualFree
GetWindowsDirectoryA
WriteFile
Sleep
TerminateProcess
ReadFile
GetSystemDirectoryA
GetTimeZoneInformation
SetCurrentDirectoryA
VirtualAlloc
GetProcAddress
wininet
InternetConnectA
InternetCloseHandle
InternetOpenA
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA
iphlpapi
GetAdaptersInfo
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE