Static task
static1
Behavioral task
behavioral1
Sample
39887128cfa2c6ea7728b4e5a105d6a81a41d0b27f5a8a2a381b0b4720c18e80.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
39887128cfa2c6ea7728b4e5a105d6a81a41d0b27f5a8a2a381b0b4720c18e80.exe
Resource
win10v2004-20220901-en
General
-
Target
39887128cfa2c6ea7728b4e5a105d6a81a41d0b27f5a8a2a381b0b4720c18e80
-
Size
108KB
-
MD5
3c6a436910b5b00df881587d5c34ba25
-
SHA1
839c34474e65fe3c4b7d327367b1b0f33739ceb3
-
SHA256
39887128cfa2c6ea7728b4e5a105d6a81a41d0b27f5a8a2a381b0b4720c18e80
-
SHA512
d93910740eb1b8410cf6b0c47ba0c4e22134a42cb50ba01d0d7789ea1f9de8c402df04af63063a11d2af0349884b410db7541ea388882875929c926b8ee1f969
-
SSDEEP
1536:hxmzZjV0MDOTy560+/8vnTHUgzF5nNFxNcAlOfixc1cV:h7fb0vT/3FxNPlIixcmV
Malware Config
Signatures
Files
-
39887128cfa2c6ea7728b4e5a105d6a81a41d0b27f5a8a2a381b0b4720c18e80.exe windows x86
e46e4505d186be757398fe0a45b3689c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
calloc
free
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
strcpy
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
memcmp
??2@YAPAXI@Z
memset
__CxxFrameHandler
memmove
_ftol
__setusermatherr
??3@YAXPAX@Z
kernel32
GetModuleHandleA
CloseHandle
Sleep
LoadLibraryA
GetProcAddress
GetStartupInfoA
advapi32
LookupPrivilegeValueA
ws2_32
select
gethostname
recv
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.topo0 Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE