Static task
static1
Behavioral task
behavioral1
Sample
bec9ac3d75491f46868ae6ed4b79ca677520901bcda82bb6f1f5f4e9dc904f84.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bec9ac3d75491f46868ae6ed4b79ca677520901bcda82bb6f1f5f4e9dc904f84.exe
Resource
win10v2004-20220812-en
General
-
Target
bec9ac3d75491f46868ae6ed4b79ca677520901bcda82bb6f1f5f4e9dc904f84
-
Size
3KB
-
MD5
69d4e36541600600697e9262e361cea8
-
SHA1
6e5d05d73c488eb99af5b5460667dca9ccef263f
-
SHA256
bec9ac3d75491f46868ae6ed4b79ca677520901bcda82bb6f1f5f4e9dc904f84
-
SHA512
7308eb33374399e831da1e31d54681e8be71b1eb706f9efa5c886a8abe2a4af3055c2c018b65c6b5e198adc186bc6f9af4ce9995b4be3ecdd7ec88b009ffd2e0
Malware Config
Signatures
Files
-
bec9ac3d75491f46868ae6ed4b79ca677520901bcda82bb6f1f5f4e9dc904f84.exe windows x86
68941c33a8e89ea0d87cdf75049dcba3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
MessageBoxA
ws2_32
send
recv
htons
gethostbyname
connect
closesocket
WSAStartup
WSACleanup
socket
urlmon
URLDownloadToFileA
kernel32
ExitProcess
GetModuleFileNameA
lstrcpyA
lstrcatA
WinExec
Sleep
MoveFileExA
Sections
.text Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 554B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE