Static task
static1
Behavioral task
behavioral1
Sample
55b6720defbbf7b40e9c699600c7a04347ee3ce5824e2284917a6b0a4d5643aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
55b6720defbbf7b40e9c699600c7a04347ee3ce5824e2284917a6b0a4d5643aa.exe
Resource
win10v2004-20220901-en
General
-
Target
55b6720defbbf7b40e9c699600c7a04347ee3ce5824e2284917a6b0a4d5643aa
-
Size
152KB
-
MD5
246228a2a6a14faded16be2e7acb39bb
-
SHA1
b78c7bce012ac18336b1e18f20b57cf1a809a4cb
-
SHA256
55b6720defbbf7b40e9c699600c7a04347ee3ce5824e2284917a6b0a4d5643aa
-
SHA512
96fbef22bcbf1497f22c6fc516b8b0f3b7c8f4037d2d8994d926ed47075a1b0430772f13b8d83ffb993aacf1c14e6ec481df53b2ee2cc47db1da33ad71326dd8
-
SSDEEP
1536:clkVb6krkwlEVLLumBiWjK6qJtPe9f82F88bOTFTJa6bgJ2Lt2ADwm77ntRVzLGo:c26qlALymzl9ffC8bYVa6b1/771GA/ce
Malware Config
Signatures
Files
-
55b6720defbbf7b40e9c699600c7a04347ee3ce5824e2284917a6b0a4d5643aa.exe windows x86
4016d7cc3a2642820b2d8a75ff7c9913
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
sinh
_mbsncat
_lseeki64
_wfreopen
_ismbcl0
getwc
_except_handler3
fflush
_mbsnset
iswascii
_umask
_sopen
ungetwc
_initterm
_strnicoll
memchr
ispunct
_winver
_wtol
_finite
putc
_outpd
_beginthread
_commode
sscanf
freopen
_cwprintf
_get_heap_handle
_expand
_snscanf
getenv
_ftime64
_ismbbgraph
_fdopen
strcspn
_strncoll
_resetstkoflw
vfwprintf
__p__commode
_strrev
_chdir
__p__fmode
_wexecvp
wcstod
_wfdopen
__setusermatherr
_logb
_mbsnextc
bsearch
tan
wcsncmp
_wrename
abort
_adjust_fdiv
_findnexti64
ldiv
_ltoa
isprint
_setjmp
_purecall
_tolower
_mbcjmstojis
_mbsnbcpy
_adj_fdiv_r
atof
mbstowcs
_filelength
_dup2
_longjmpex
_lseek
_getdcwd
_control87
_mbctoupper
_mbslen
wcslen
fputws
_seh_longjmp_unwind
_adj_fdiv_m64
_ismbclegal
iswlower
_outp
_waccess
_exit
_fullpath
_fsopen
fclose
_controlfp
wcsspn
_ismbcl1
memcpy
strstr
_open
_chgsign
strtol
_mbscpy
_stricoll
time
_wremove
_wfindfirst
_searchenv
_ismbcspace
_creat
_mbclen
isgraph
_gcvt
fread
_ismbcalpha
_nextafter
__set_app_type
_utime
_acmdln
_fcloseall
__getmainargs
strlen
vsprintf
_futime
_ismbbprint
_aligned_realloc
_ismbcpunct
_i64tow
_scwprintf
_mbsnbset
puts
_wcsnicoll
_mbscat
_aexit_rtn
cos
_ctype
wcstombs
exit
_fstati64
_XcptFilter
_wpgmptr
getchar
_mbsnbcoll
tmpfile
_wtoi
_mbsrchr
_wcsupr
tmpnam
_mbsicoll
_getws
_wrmdir
isdigit
_heapused
frexp
_fileno
kernel32
LockResource
SetEvent
GetCurrentProcessId
GetSystemInfo
GetVersion
GetEnvironmentVariableA
ReadProcessMemory
GetSystemDirectoryA
TlsGetValue
LoadLibraryA
HeapCreate
MulDiv
GetDateFormatA
FindFirstFileA
InitializeCriticalSection
InterlockedIncrement
DuplicateHandle
CreateFileA
CreateProcessA
GetModuleHandleA
SetStdHandle
GetCurrentThread
SetFilePointer
FindResourceA
SetPriorityClass
Sleep
FreeEnvironmentStringsW
GetCurrentThreadId
InterlockedExchange
lstrcmpA
TlsSetValue
GlobalMemoryStatus
LCMapStringA
LoadResource
SizeofResource
GetOEMCP
GetCPInfo
GetLastError
LCMapStringW
FindClose
CreateEventA
GetFileType
GetStdHandle
lstrcpynA
GetTimeFormatA
ExitThread
GetModuleFileNameA
FormatMessageA
IsBadReadPtr
GetComputerNameW
GetLocaleInfoA
LoadLibraryW
GetModuleHandleW
InterlockedDecrement
GetConsoleMode
SetLastError
HeapSize
UnmapViewOfFile
GetProcessAffinityMask
GlobalReAlloc
ExitProcess
GetFileAttributesA
GetStartupInfoA
GetThreadContext
GetACP
MultiByteToWideChar
ResumeThread
OpenEventA
HeapAlloc
TlsFree
WriteConsoleA
GetConsoleOutputCP
RaiseException
lstrcatA
PulseEvent
GetCommandLineW
VirtualFree
GetConsoleCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetThreadAffinityMask
GetCurrentDirectoryA
OpenProcess
IsValidCodePage
CreateToolhelp32Snapshot
VirtualAlloc
GetCurrentProcess
GetStringTypeW
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 85B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ