Static task
static1
Behavioral task
behavioral1
Sample
039a5dec53f58c8d8b0eaa17dc16e30191003b1cb8accac40d7181e734ccc92f.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
039a5dec53f58c8d8b0eaa17dc16e30191003b1cb8accac40d7181e734ccc92f.exe
Resource
win10v2004-20220414-en
General
-
Target
039a5dec53f58c8d8b0eaa17dc16e30191003b1cb8accac40d7181e734ccc92f
-
Size
29KB
-
MD5
509c43bf877011d8e1c91c551bb3bede
-
SHA1
370d0591e61cd601b3eeadc3fe2b952bd96decdc
-
SHA256
039a5dec53f58c8d8b0eaa17dc16e30191003b1cb8accac40d7181e734ccc92f
-
SHA512
f01489e37af2c28cb7a09fee9977257e63e3c4e430aec12bac65c427d52fc5db8897c67809e5497199b2127d12501f318272499270b913de4b11fa0b4a43cc8c
-
SSDEEP
384:YrrtBl1jNM5vPomogd31UNmilzx8Mu7fSMDGW+MDXx13pxePWSSiZQ:4zW5oLg4miP877lWGZx4Ef
Malware Config
Signatures
Files
-
039a5dec53f58c8d8b0eaa17dc16e30191003b1cb8accac40d7181e734ccc92f.exe windows x86
a29fe9e4fc9f8be681130a5bd8ead111
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_snwprintf
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
fscanf
_acmdln
exit
_XcptFilter
_exit
wcscmp
wcslen
fclose
fgets
strtok
atoi
strstr
strchr
strcat
strlen
strcpy
_snprintf
memset
malloc
srand
rand
sprintf
_wfopen
feof
fprintf
ws2_32
recv
WSAStartup
getnameinfo
htons
inet_pton
closesocket
socket
connect
inet_addr
gethostbyname
send
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
urlmon
URLDownloadToFileW
shlwapi
PathFileExistsW
dnsapi
DnsFree
DnsQuery_A
kernel32
CreateThread
CreateProcessW
GetLocalTime
Sleep
FileTimeToSystemTime
GetTimeZoneInformation
GetTickCount
lstrcpyA
FileTimeToLocalFileTime
lstrlenA
ExitThread
GetModuleFileNameW
ExitProcess
GetLastError
CreateMutexA
ReadFile
SetFilePointer
WriteFile
GetFileSize
CloseHandle
CreateFileW
GetSystemTime
GetModuleHandleA
GetStartupInfoA
DeleteFileW
ExpandEnvironmentStringsW
SetFileAttributesW
CreateDirectoryW
CopyFileW
user32
CharUpperA
wsprintfA
advapi32
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
ShellExecuteW
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ