Static task
static1
Behavioral task
behavioral1
Sample
b812046e0f2e9c1c4dc5afa7a6faaa5af3e44025bf6f5ff6fe299925747acd74.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b812046e0f2e9c1c4dc5afa7a6faaa5af3e44025bf6f5ff6fe299925747acd74.exe
Resource
win10v2004-20220812-en
General
-
Target
b812046e0f2e9c1c4dc5afa7a6faaa5af3e44025bf6f5ff6fe299925747acd74
-
Size
3KB
-
MD5
867b6ddfcee9924b8192ec28ca968870
-
SHA1
a184f91a2cbbebd3322b85b178b708d8cf078ee3
-
SHA256
b812046e0f2e9c1c4dc5afa7a6faaa5af3e44025bf6f5ff6fe299925747acd74
-
SHA512
5d59a073b0e4d4ba9cb2aaf5c77a54b8f394cbb524762385dc076b54fd7a24292e1809c230f8cf059b821f46c6768e382d54e483e20b665a586bce66d1b1aa00
Malware Config
Signatures
Files
-
b812046e0f2e9c1c4dc5afa7a6faaa5af3e44025bf6f5ff6fe299925747acd74.exe windows x86
5b3f84b0d363380e7e745dfadaa53d85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
DeleteFileA
GetTempPathA
GetProcAddress
LoadLibraryA
ExitProcess
WinExec
Sleep
CopyFileA
GetWindowsDirectoryA
user32
wsprintfA
shell32
ShellExecuteA
wininet
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile
shlwapi
PathRemoveFileSpecA
msvcrt
_itoa
sprintf
strchr
_stricmp
fopen
fscanf
fclose
??2@YAPAXI@Z
??3@YAXPAX@Z
rpcrt4
UuidCreateSequential
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ