Static task
static1
Behavioral task
behavioral1
Sample
b00e7db251016a46e468d2f8599c6fe2174adf1567e8b61a65303e17cccc4355.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b00e7db251016a46e468d2f8599c6fe2174adf1567e8b61a65303e17cccc4355.exe
Resource
win10v2004-20220812-en
General
-
Target
b00e7db251016a46e468d2f8599c6fe2174adf1567e8b61a65303e17cccc4355
-
Size
15KB
-
MD5
e65d7ab639a2361493d388e36d1e663a
-
SHA1
10ca307a6407535df3662ed6e78fa11274a62b3e
-
SHA256
b00e7db251016a46e468d2f8599c6fe2174adf1567e8b61a65303e17cccc4355
-
SHA512
dc58aebd15740040fd1800e03216987f4c2fb84c37254a0191694d3e2996959df5515da9094b2ddaaecf13102faca93dfcb840de5166a71be157dd3ed5f68203
-
SSDEEP
192:3KP6QyQ3hZfSNF02/9de3PkndHjwkzDpE5U/aerItChV4CchJmTahu:3AXGP0adeodpvpE52aeBn8Jmf
Malware Config
Signatures
Files
-
b00e7db251016a46e468d2f8599c6fe2174adf1567e8b61a65303e17cccc4355.exe windows x86
d6f91576a58677e3f0d6a99052732a3c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetDateFormatA
GetDriveTypeA
GetFileSize
GetLocalTime
GetLogicalDriveStringsA
GetModuleFileNameA
GetSystemDirectoryA
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetWindowsDirectoryA
GlobalAlloc
LocalAlloc
LocalFree
MapViewOfFile
ReleaseMutex
Sleep
SystemTimeToFileTime
UnmapViewOfFile
WaitForSingleObject
WinExec
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA
CreateMutexA
CreateThread
CloseHandle
ExitProcess
CreateFileMappingA
CreateFileA
CopyFileA
CompareFileTime
GlobalFree
user32
wsprintfA
wsock32
listen
recv
select
inet_addr
send
gethostname
gethostbyname
connect
closesocket
bind
accept
socket
WSAStartup
ole32
CoInitialize
CreateStreamOnHGlobal
shlwapi
StrTrimA
StrRChrA
StrStrIA
StrDupA
wininet
InternetOpenUrlA
InternetOpenA
InternetGetConnectedState
InternetCloseHandle
advapi32
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegCloseKey
iphlpapi
GetNetworkParams
shell32
ShellExecuteA
Sections
beagle Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE