_ep@4
_re@4
Behavioral task
behavioral1
Sample
8848598d834c331cbdebd866377c14a0fb26b015fe48929551d45e70006dcf6d.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
8848598d834c331cbdebd866377c14a0fb26b015fe48929551d45e70006dcf6d.exe
Resource
win10v2004-20231023-en
Target
8848598d834c331cbdebd866377c14a0fb26b015fe48929551d45e70006dcf6d
Size
36KB
MD5
d2338c78ee48e6dd1630c098bb6324e5
SHA1
278311f211e5dd14cb56b5867a53814ccfb0b50a
SHA256
8848598d834c331cbdebd866377c14a0fb26b015fe48929551d45e70006dcf6d
SHA512
8908251799094022f5b417b2b0c909914ae6795bedf79259782df375471a6f6a788c56589de4ef2e8c818de12643ca3974a28de8822a2055cb10ade2e63e88fe
SSDEEP
384:0ewNOnxK8uiEejM/wHQqhrXxGm4hEEZ+DMsuTmex+HFY+EKWbwFt+AYt9SKSMQMv:eO8Ni5jfwqh0hSexnTbgJrGPwb
mylobot
onthestage.ru:6521
stanislasarnoud.ru:5739
krebson.ru:4685
Checks for missing Authenticode signature.
resource |
---|
8848598d834c331cbdebd866377c14a0fb26b015fe48929551d45e70006dcf6d |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
InitializeCriticalSection
LoadLibraryA
GetCurrentProcessId
TerminateProcess
GetProcessId
Sleep
FindClose
GetFullPathNameA
SetFileAttributesA
DeleteFileA
FindFirstFileA
FindNextFileA
MoveFileA
CreateProcessW
CloseHandle
GetTickCount
GetModuleFileNameW
GetModuleHandleW
Module32First
Module32Next
ExitThread
SuspendThread
ResumeThread
EnterCriticalSection
LeaveCriticalSection
SetEvent
CreateEventA
GetVersionExA
GlobalAlloc
GlobalFree
GetSystemTimeAsFileTime
lstrlenW
CreateDirectoryA
GetCurrentDirectoryW
DeleteFileW
GetLongPathNameW
TerminateThread
FlushInstructionCache
VirtualAllocEx
VirtualFreeEx
VirtualProtectEx
OpenProcess
CreateRemoteThread
ReadProcessMemory
WriteProcessMemory
WaitForSingleObject
GetFileSize
ReadFile
CreateFileW
SetLastError
WriteFile
GetTempPathW
lstrlenA
LocalAlloc
lstrcatW
CreateThread
LocalFree
WaitForMultipleObjects
SetErrorMode
wsprintfA
ShellExecuteExW
SHGetSpecialFolderPathA
inet_addr
gethostbyname
WSAGetLastError
ioctlsocket
freeaddrinfo
htons
recv
connect
socket
send
getaddrinfo
select
closesocket
_ep@4
_re@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ