Static task
static1
Behavioral task
behavioral1
Sample
fe27f512511cdc1536b1d6e9665a5fe75cdbaf7a8a780073bccd3ecdbc318bdf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fe27f512511cdc1536b1d6e9665a5fe75cdbaf7a8a780073bccd3ecdbc318bdf.exe
Resource
win10v2004-20220812-en
General
-
Target
fe27f512511cdc1536b1d6e9665a5fe75cdbaf7a8a780073bccd3ecdbc318bdf
-
Size
314KB
-
MD5
3e090b5367fbd0974dc60c2934acd241
-
SHA1
19ca7e7145c091b43a81d731d954611576326e97
-
SHA256
fe27f512511cdc1536b1d6e9665a5fe75cdbaf7a8a780073bccd3ecdbc318bdf
-
SHA512
9de587ec7c226e832ff7870b510cda7355696a2cd763f5c8a0af8496d0f11ae9d3f6a07cf77a4e2cb8a5b729a5bdb75b7b0247ac428894b98dc54655206a38ef
-
SSDEEP
6144:3zn9cpxx7pJ7vEZW+YbevsdNQ34Mqirtt9Y:pcPpvYYKvgVFirL6
Malware Config
Signatures
Files
-
fe27f512511cdc1536b1d6e9665a5fe75cdbaf7a8a780073bccd3ecdbc318bdf.exe windows x86
af5ab3d31778ea1ee0c4dc1de8156b2e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetProcAddress
LoadLibraryA
CloseHandle
FreeLibrary
CreateThread
LoadLibraryW
GetModuleHandleA
GetStartupInfoA
user32
wsprintfA
shell32
ShellExecuteA
msvcrt
_XcptFilter
rand
srand
strlen
memcpy
memset
sprintf
strncpy
strcspn
strstr
strcpy
realloc
malloc
strcat
??2@YAPAXI@Z
atoi
_except_handler3
strncmp
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
ws2_32
shutdown
inet_addr
__WSAFDIsSet
shlwapi
SHDeleteKeyA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ