Behavioral task
behavioral1
Sample
01ab7eab84acdfbdf2f3addd8894d10cfc7993c11c7cfb3754fb649d9be86264.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
01ab7eab84acdfbdf2f3addd8894d10cfc7993c11c7cfb3754fb649d9be86264.exe
Resource
win10v2004-20230220-en
General
-
Target
01ab7eab84acdfbdf2f3addd8894d10cfc7993c11c7cfb3754fb649d9be86264.exe
-
Size
181KB
-
MD5
98994d7606e0c9da417024c03c54b591
-
SHA1
fa4e90845234e35c27fb5d1a2f61fd02d5c3d3f7
-
SHA256
01ab7eab84acdfbdf2f3addd8894d10cfc7993c11c7cfb3754fb649d9be86264
-
SHA512
ecd5c8fe6deca84bbfefab70cbea0f2ab20663d4e0317b44514d639f208c1038298b1fd4890b10210564c49c4d168ff97d1f7a978b00a8e2edfe9e4a77246506
-
SSDEEP
3072:2bX4kQvFJdO43t/c5scFV6hP/zSJRCUweMoeks3jG1ZlRRR:BU2tk5B6hP/MC9e3eHzG1Z
Malware Config
Extracted
formbook
4.1
n13e
cowiemarketing.com
uniqueliquidz.co.uk
755259.com
7bw95.com
luxbarstools.co.uk
baccaratda.com
berkayakpinar.xyz
gistus.africa
hjd387.com
leave-fly.com
golfclubdaddy.com
engineeringea.buzz
countryrevisited.com
decoracioneskalite.com
imaginationlirbary.com
moneytransfer.africa
brainwaveproject.com
3039sjbqf2022.com
184hotels.com
aromamiaro.com
bigching.com
armkette.com
energytechnicalsystems.com
bodw2022.com
keptpasha.online
fossillandstone.com
guioueui.link
cleanupbycmw.com
inyeculinary.com
papercrochet.net
jaderoadfarm.com
bril-leadinginvention.com
dtgwarehouse.com
successrn.net
660web.com
lovedhug.com
juicecomedy.co.uk
enigmaxk.com
romunro.net
cassiekayreads.com
ibuycomputers.com
blossomblushbelltents.co.uk
hjce06.com
applyingdreams.com
h2ghb3.site
glown.africa
533671.com
charlottechoicelimos.com
bossinfra.com
anrovlp.xyz
1wqzsb.top
ertfsdf.xyz
exotico-store.com
betterportions.com
corfix.app
888sq.club
takeselfies.net
getyourtitleback.com
clickadega.com
midwestflowsproductions.net
duraveritaswines.com
dublintwist.com
apollobenfitservices.com
kp-aodeli.com
davidmchughroofing.co.uk
Signatures
Files
-
01ab7eab84acdfbdf2f3addd8894d10cfc7993c11c7cfb3754fb649d9be86264.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ