Static task
static1
Behavioral task
behavioral1
Sample
Joke/Joke.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Joke/Joke.exe
Resource
win10v2004-20220812-en
General
-
Target
a546ab03ba5cba8bdce9af516b19e090ad6d42562950afa8b4f67b8e40464bbf
-
Size
11KB
-
MD5
b870b7eccd7a77300e8fdaf2cb4a4c6b
-
SHA1
fda5b07ff11e9f20a0c3a2a5927a13742df335bd
-
SHA256
a546ab03ba5cba8bdce9af516b19e090ad6d42562950afa8b4f67b8e40464bbf
-
SHA512
9e7eb317d43d54827553478f8bac7598b7682051817d71110b086da0592ce3bb4121f74c80a334a7cfd33337a65c2cd92b08179161b684ac37e60b9d5cfd382d
-
SSDEEP
192:LmCitc4eGcx1YTNg/oVUiYRRXfGvMYOBqp93yxmVld8qRrKQ3crby0oYBMb33f9c:LeUGcx1aEoOHOvPOwpVymf84KQ3KgAx
Malware Config
Signatures
Files
-
a546ab03ba5cba8bdce9af516b19e090ad6d42562950afa8b4f67b8e40464bbf.lzh
-
Joke/Joke.exe.exe windows x86
9454f5a6aca29c847cc8abf92f9c8722
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
GetMessageA
DispatchMessageA
PostQuitMessage
DefWindowProcA
RegisterClassExA
LoadIconA
LoadCursorA
UpdateWindow
CreateWindowExA
ShowWindow
gdi32
GetStockObject
kernel32
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
HeapFree
VirtualFree
HeapReAlloc
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualAlloc
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Joke/readme.txt