Static task
static1
Behavioral task
behavioral1
Sample
b25acd5965b0096e78b9481dc5d65a0253174481d98b2229fe87005b182fb801.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b25acd5965b0096e78b9481dc5d65a0253174481d98b2229fe87005b182fb801.exe
Resource
win10v2004-20220812-en
General
-
Target
b25acd5965b0096e78b9481dc5d65a0253174481d98b2229fe87005b182fb801
-
Size
6KB
-
MD5
c0aed62094b897a5c7fffd918d296ef2
-
SHA1
35e43e0f6574b93ade7ef2bca086312ae81e4b26
-
SHA256
b25acd5965b0096e78b9481dc5d65a0253174481d98b2229fe87005b182fb801
-
SHA512
b092a5b1024127eaf432d8ef2f2ea3b85af2bc2d7d377d7fae2ca58e0ba6b54c335c846579478c2abb909bbeeb2fa33574dbbdc5fade51a5e40a7ac03a4ee7e7
-
SSDEEP
96:EwVHk0TQT34PudmJ5E9CXiLPC4bnEsZE/rPtboynYgVth9C:vFg4zSL64jA/rP1oynBE
Malware Config
Signatures
Files
-
b25acd5965b0096e78b9481dc5d65a0253174481d98b2229fe87005b182fb801.exe windows x86
680a6692408b39a32d6cc94339066d99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetStartupInfoA
lstrcpyA
lstrcpynA
GetModuleHandleA
MultiByteToWideChar
user32
wsprintfA
winhttp
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpConnect
WinHttpOpenRequest
WinHttpSendRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpen
WinHttpReceiveResponse
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
msvcrt
_XcptFilter
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
free
__setusermatherr
memset
malloc
strlen
_exit
memcpy
exit
_acmdln
__getmainargs
_initterm
shlwapi
PathFileExistsA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ