Static task
static1
Behavioral task
behavioral1
Sample
355794cf26818c73933d36a5129653e42b95485ef1e14d2166967bb28087dd74.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
355794cf26818c73933d36a5129653e42b95485ef1e14d2166967bb28087dd74.exe
Resource
win10v2004-20220901-en
General
-
Target
355794cf26818c73933d36a5129653e42b95485ef1e14d2166967bb28087dd74
-
Size
1.0MB
-
MD5
b42957496e119a078a4edc740991babd
-
SHA1
10629bad1d5ec89dc56bb659560fb4c64e140a88
-
SHA256
355794cf26818c73933d36a5129653e42b95485ef1e14d2166967bb28087dd74
-
SHA512
01bf9a609c1388949a2858565169d83caa78cf10ec1df6666d087d5923776159c2e8bdae32ef38ebb08ec460dddbe12b38959c933c09fc5ef0160d0416e3c201
-
SSDEEP
24576:NpM/Rv/SIxqwry9YdoYKla6XLuuJ1FhB0O70ec/03:fM/RXSIxTryOKw67LJHN70er3
Malware Config
Signatures
Files
-
355794cf26818c73933d36a5129653e42b95485ef1e14d2166967bb28087dd74.exe windows x86
bac3108e9dfef08f441daae78f6514c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
GetCommandLineA
Sleep
lstrcatA
msvcrt
_acmdln
_XcptFilter
__set_app_type
_adjust_fdiv
_except_handler3
__setusermatherr
wcschr
exit
__CxxFrameHandler
_exit
wcslen
memmove
_controlfp
rand
wcstoul
Sections
.text Size: 1024B - Virtual size: 998B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1004B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 502B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1018KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ