Static task
static1
Behavioral task
behavioral1
Sample
cf246c1957f1d082fb714124c583dfadebb84a7afd1bc0095db46bf955459556.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf246c1957f1d082fb714124c583dfadebb84a7afd1bc0095db46bf955459556.exe
Resource
win10v2004-20220812-en
General
-
Target
cf246c1957f1d082fb714124c583dfadebb84a7afd1bc0095db46bf955459556
-
Size
140KB
-
MD5
512ede4b40be8359e445a70c13c69af0
-
SHA1
3d1e9e78fdfe55b865bf34bdd2016c603ec0a44e
-
SHA256
cf246c1957f1d082fb714124c583dfadebb84a7afd1bc0095db46bf955459556
-
SHA512
b066ff41221e133b6d06afa9a21f4a41bdf75f7e79d8f4c29f2a72e86e958decaece13bab3bbcf84eef05df36c78eba9db9ad5ca84ac2f8a03ee543df161819f
-
SSDEEP
3072:xJrZzXiDyg3rx/U+VlYivoAz3qGADtSPaAIKaGc:x9Fkr2iAYVAROaBn9
Malware Config
Signatures
Files
-
cf246c1957f1d082fb714124c583dfadebb84a7afd1bc0095db46bf955459556.exe windows x86
28230624e45a0c9c07abcb435305baec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
VirtualFree
VirtualAlloc
lstrcpyA
SetEvent
GetTickCount
GetLocalTime
Sleep
FreeLibrary
GetCurrentProcessId
lstrlenA
GetPrivateProfileSectionNamesA
lstrcatA
MultiByteToWideChar
WideCharToMultiByte
lstrcmpA
GetVersionExA
GetDriveTypeA
LocalFree
LocalAlloc
RemoveDirectoryA
WriteFile
ReadFile
SetFilePointer
GetLastError
CreateProcessA
ExitProcess
MoveFileA
CreateEventA
GlobalFree
GlobalUnlock
OutputDebugStringA
ReleaseMutex
SetErrorMode
InterlockedExchange
GetStartupInfoA
GetModuleHandleA
RaiseException
msvcrt
strchr
malloc
strcmp
free
_except_handler3
strrchr
rename
strcat
strncmp
atoi
_errno
strncat
_beginthreadex
strncpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
puts
strcpy
putchar
rand
strlen
memcmp
memcpy
ceil
_CxxThrowException
memmove
??1type_info@@UAE@XZ
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
memset
_ftol
_strnicmp
calloc
msvcp60
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
msvcirt
?cout@@3Vostream_withassign@@A
?endl@@YAAAVostream@@AAV1@@Z
?cin@@3Vistream_withassign@@A
??5istream@@QAEAAV0@AAH@Z
??6ostream@@QAEAAV0@PBD@Z
Sections
.data Size: 116KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ