Static task
static1
Behavioral task
behavioral1
Sample
0ceb6c66774c4fdb4da85fa204f14169.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0ceb6c66774c4fdb4da85fa204f14169.exe
Resource
win10v2004-20230220-en
General
-
Target
0ceb6c66774c4fdb4da85fa204f14169.exe
-
Size
952KB
-
MD5
2bb82bccae67ff7d293127f7583fd296
-
SHA1
3c78f122fe2e0da2111dbaf56344704ecf7c573b
-
SHA256
519585f1666c0e3bf3817d4afe0ea750d84562b824e735bfe39e4eca03f8d4d8
-
SHA512
9d4d9c9213eb719f6ce7741b0c576647a42af6e1c0f890e863864a0f3ad458503ce3261c5cc53cc67681a768a457016d5bcaff75e7430ea7d2d336a1884c8c34
-
SSDEEP
12288:jU4NVBidFZ8QjaFIS5HcQ94T1j+NiGeKWmKt5cP3rrXIX93L:A4FQFZBjYIS9cgYMwCfrUx
Malware Config
Signatures
Files
-
0ceb6c66774c4fdb4da85fa204f14169.exe.exe windows x86
d37e2643328bdbb365737d53f0521275
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
GetVersionExA
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
user32
GetSystemMetrics
gdi32
CreateCompatibleBitmap
advapi32
RegCloseKey
shell32
ShellExecuteA
wininet
HttpOpenRequestA
gdiplus
GdipSaveImageToFile
Sections
.text Size: 1024B - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE