Behavioral task
behavioral1
Sample
b45be59343f5970290662dc9e333544b0e467b88896fb37e4a334049101aa8df.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b45be59343f5970290662dc9e333544b0e467b88896fb37e4a334049101aa8df.exe
Resource
win10v2004-20220812-en
General
-
Target
b45be59343f5970290662dc9e333544b0e467b88896fb37e4a334049101aa8df.exe
-
Size
181KB
-
MD5
9b087019943fbcd5c15159ab82666c81
-
SHA1
1f65560d44dfc42b43fa7b7c9531c555ad12c552
-
SHA256
b45be59343f5970290662dc9e333544b0e467b88896fb37e4a334049101aa8df
-
SHA512
9d01c89fb871ce390164bdecc706490accfd2e488d5c7e186fb81aa48d1f269f1154ff99599aaa0cc71bfeee28dcc5a8c41408f2acf88448031e567abdb40247
-
SSDEEP
3072:wMBQkmTYiXi0BT35B3Gixc6qzm3QHvC7YhK1f/irMOmdNdO:YIu75pGic6qzm3ovMY6fKrKdNd
Malware Config
Extracted
formbook
4.1
o12i
dbepa.com
isenseot.com
trainwithmichelle.co.uk
eqhired.com
crushthehacker.com
fineartintimates.com
alphabet1x.com
gdnfys.com
bauav.com
frommm.com
easyquicklabs.com
cat-cazino.buzz
lowpriceaxis.com
brendaalonso.net
darkblissclothing.com
betrar355.com
help-web.ru
asxoffice.com
cityofparistx.com
beriterusyah.click
neswopi.xyz
ceucavy.top
cy56v.beauty
faunapetsstore.com
ghazouli.shop
fawazgruosi.co.uk
dormirbedandfoam.com
laumangve.net
diqiumaoyi.com
comfortmedial.com
wigansignservices.uk
buildinspain.com
handyjamconstruction.com
dein-wandelkreis.com
55yyy.net
kamencani.com
28984.uk
gappst.com
humanograma.com
23554189027.com
denizgroupco.com
3880365.com
ihdgyengd.xyz
leka.fun
beingabroad.store
herokids.africa
efefdivergent.buzz
45gp.xyz
healhousepg.com
lrhyqygl.com
irenovationmedia.com
kostadmed.com
chiaseed-food.click
jiesportshero.com
kev4hay.com
junoo.tech
ilovedopney.com
herewu.com
curatorsnotes.press
celiconwellness.com
amenergiasolar.com
bibleproject2020.com
bcbxdsh.com
imaglnationlibrary.com
hillsdiehavens.co.uk
Files
-
b45be59343f5970290662dc9e333544b0e467b88896fb37e4a334049101aa8df.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ