Static task
static1
Behavioral task
behavioral1
Sample
884898b0b42e41131cb3781bb977c7fab88a119b5f123667eaab50a2a30f6aee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
884898b0b42e41131cb3781bb977c7fab88a119b5f123667eaab50a2a30f6aee.exe
Resource
win10v2004-20220812-en
General
-
Target
884898b0b42e41131cb3781bb977c7fab88a119b5f123667eaab50a2a30f6aee
-
Size
447KB
-
MD5
0fb627842ba5c19ce6cbeead15da5c60
-
SHA1
389d0f5406dbe4daddc32a25709d216a63078b99
-
SHA256
884898b0b42e41131cb3781bb977c7fab88a119b5f123667eaab50a2a30f6aee
-
SHA512
f6722ac414cf0dd81b5b4b2612eed9152a05a353f33f3b18f323138406da5c50de7caf79238eff4699531c39b0f075bbbc00c4346a37abd2896cbfe791b6ce61
-
SSDEEP
12288:jRUTV5nAsWlwm46/W+NfhkJ14U8JhJ+sV1/zIGBK3osNVoEct:GTV5nhhm4AW+hh24U8JhJ+sVNzd84s0t
Malware Config
Signatures
Files
-
884898b0b42e41131cb3781bb977c7fab88a119b5f123667eaab50a2a30f6aee.exe windows x86
c4a2407f5c26628324f031bb68c39a54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
CreateFileA
ReadFile
SetFilePointer
CreateDirectoryA
WinExec
WideCharToMultiByte
SetFileAttributesW
CreateFileW
GetModuleFileNameW
ExpandEnvironmentStringsA
GetTickCount
GetModuleHandleA
GetStartupInfoA
msvcrt
sprintf
rand
??2@YAPAXI@Z
wcslen
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??3@YAXPAX@Z
strncpy
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ