Static task
static1
Behavioral task
behavioral1
Sample
c34278c273c778dd19f5f0896e7d9d2644c7c3fa9b6e1d35020f3849bd2ab778.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c34278c273c778dd19f5f0896e7d9d2644c7c3fa9b6e1d35020f3849bd2ab778.exe
Resource
win10v2004-20221111-en
General
-
Target
c34278c273c778dd19f5f0896e7d9d2644c7c3fa9b6e1d35020f3849bd2ab778
-
Size
32KB
-
MD5
a34cf432e18cc6e7276f3709d741e572
-
SHA1
075d2fc1739af245c024ff87cc93ff457fb16c18
-
SHA256
c34278c273c778dd19f5f0896e7d9d2644c7c3fa9b6e1d35020f3849bd2ab778
-
SHA512
c0ea2f65fd4a64a47511197f29bb9710fae15fce77c21dd784840bebbb52a812244ddac146a9a3900bd656832883d28730873ddd2332893ee5a7c63c5387b2d3
-
SSDEEP
384:SenkiMXBoFxjuKcqjAmso/eNYeEdzp/WTqW:S6XGW7xTAmspm+
Malware Config
Signatures
Files
-
c34278c273c778dd19f5f0896e7d9d2644c7c3fa9b6e1d35020f3849bd2ab778.exe windows x86
9940bb3f93276b94f403b16cf6c7ddc1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempFileNameW
GetTempPathW
GetLastError
WaitForMultipleObjects
SetErrorMode
CreateFileW
GetCurrentThreadId
SetWaitableTimer
CreateWaitableTimerW
CancelWaitableTimer
GetTickCount
SizeofResource
LoadResource
FindResourceExW
GetModuleHandleW
GetStartupInfoW
WriteFile
CloseHandle
CreateProcessW
LoadLibraryW
Sleep
GetProcAddress
SearchPathA
GetFullPathNameA
MoveFileA
GetFileAttributesA
CreateDirectoryA
SetFileAttributesA
CreateFileA
GetFileSize
GetCurrentProcess
ExitProcess
GetTempPathA
GetCommandLineA
LoadLibraryA
lstrcpynA
GlobalUnlock
CreateThread
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpA
ExpandEnvironmentStringsA
WaitForSingleObject
GetModuleHandleA
LoadLibraryExA
FreeLibrary
MultiByteToWideChar
GetPrivateProfileStringA
ReadFile
MulDiv
FindNextFileA
GetWindowsDirectoryA
user32
PostQuitMessage
DispatchMessageW
TranslateMessage
GetMessageW
PostThreadMessageW
PeekMessageW
CharToOemBuffA
wininet
InternetConnectW
InternetCloseHandle
InternetReadFile
HttpQueryInfoW
HttpSendRequestW
InternetOpenW
InternetCrackUrlW
HttpOpenRequestW
HttpAddRequestHeadersW
ws2_32
WSAStartup
WSACleanup
msvcrt
wcsncpy
_exit
_beginthreadex
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
malloc
wcslen
free
realloc
wcscpy
_XcptFilter
_cexit
toupper
sscanf
fprintf
_setmode
time
isdigit
islower
isspace
__initenv
snmpapi
SnmpUtilVarBindFree
SnmpUtilMemFree
SnmpUtilMemAlloc
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ