Behavioral task
behavioral1
Sample
e8120ddaa86fc56ab083a38b22ca366809e5d1196f3c10175bc745e3dfd15750.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e8120ddaa86fc56ab083a38b22ca366809e5d1196f3c10175bc745e3dfd15750.exe
Resource
win10v2004-20220812-en
General
-
Target
e8120ddaa86fc56ab083a38b22ca366809e5d1196f3c10175bc745e3dfd15750.exe
-
Size
181KB
-
MD5
b851f841b33b2911c454b6126716e71d
-
SHA1
7628ab856d509adfcd7e8fc4212c71571faf9e2c
-
SHA256
e8120ddaa86fc56ab083a38b22ca366809e5d1196f3c10175bc745e3dfd15750
-
SHA512
680f8ff2c2184ab4f88b44743900ea5e6b399e1e13ef05ef2ae43542cc500e818881486ccae2220e3c147181111708395f33bc48e6e9d8220c2b5bd90f00b649
-
SSDEEP
3072:m81ZkcOYX2iR3h7+gMJOTKjgtCZoEilKag3Tx+Cf9:NRNhig1TKjgtCaPST4CF
Malware Config
Extracted
formbook
4.1
d03s
laurasgreenleaves.co.uk
fantastik3d.com
jsstee.com
foodynation.co.uk
3623wnorthgate.com
titanmedical.africa
keithjacksonlifecoach.com
kardilah.shop
crisscrossfishsauce.com
lojatanamao.online
ceways.com
holybreadstudios.com
c66u.xyz
poococoin.net
exipureyour7best.online
easterislandfoundation.net
09448.voto
gzbzxyy.com
0uqx.xyz
agentfarah.com
gongtianhouse.com
ytorly.xyz
janolepets.com
jvkai.com
sttholdings.net
fraziersusedcarsnc.com
unitedtileandstonela.com
b5623.com
klcp311.com
aaruvisoiree.com
ispeaki.com
decertifyi.com
laowazhijia.com
eldiache.com
goodnewsgoat.com
championscupdraw.com
adryanabb.com
activeshop.uk
123jj11o.top
averycap.com
allow11.com
cleaning-services-66938.com
naturenurturelandscapes.co.uk
beauty-nails.site
cha-style.com
greattrump.xyz
yuanzhoulvgw.net
juicychuck.com
edwinesia.com
localfoods.africa
glistening.site
aprilandmax.rsvp
domanahvoynoy.ru
contabilmais.shop
gegeartprints.com
a2sk.shop
levelshhealth.com
ganchenbox.com
car-deals-70763.com
ckeventsltd.com
gdcxv.beauty
bermudadunesmoving.com
functionalfood.info
destroy.cfd
flavoredkreations.com
Files
-
e8120ddaa86fc56ab083a38b22ca366809e5d1196f3c10175bc745e3dfd15750.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ