Static task
static1
Behavioral task
behavioral1
Sample
c1b6bc789342c2ae250f68614d869854aafca0f475299050cd75c187f5abd5a1.exe
Resource
win7-20220812-en
General
-
Target
c1b6bc789342c2ae250f68614d869854aafca0f475299050cd75c187f5abd5a1
-
Size
268KB
-
MD5
7941544f9a1b165b088caae43a955735
-
SHA1
11c063bc3857e9c5e09b09d96d1ee318db223255
-
SHA256
c1b6bc789342c2ae250f68614d869854aafca0f475299050cd75c187f5abd5a1
-
SHA512
56da35d5e476dc58b100a32b7352d80d490a68a0d0516c5fc68ddb40b7f24eef91dca42e9b1140d53248012085b1fda9db9dc99d510e4f094bd9379eea18be27
-
SSDEEP
6144:d73pyGTzl+OjrvClTvqYypaN43h95e4jpSccpxxdf9WyYm3xUQSC1Cuwo:d7z9CWbpdhH7EZIugmCJo
Malware Config
Signatures
Files
-
c1b6bc789342c2ae250f68614d869854aafca0f475299050cd75c187f5abd5a1.exe windows x86
85ae73aed3a6d9ae3491c949a70348d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
exit
memcpy
_itoa
??2@YAPAXI@Z
_strdup
??3@YAXPAX@Z
free
__p__commode
kernel32
GetTempPathA
GetModuleHandleA
GetModuleFileNameA
CreateFileA
SetFilePointer
CloseHandle
GetTempFileNameA
FreeLibrary
DeleteFileA
WriteFile
ReadFile
LoadLibraryA
GetProcAddress
GetStartupInfoA
user32
MessageBoxA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ