Static task
static1
Behavioral task
behavioral1
Sample
68c31840060433b751b4ae1651dd40260c5e9d844eb455d8508a07a1a6788802.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
68c31840060433b751b4ae1651dd40260c5e9d844eb455d8508a07a1a6788802.exe
Resource
win10v2004-20220812-en
General
-
Target
68c31840060433b751b4ae1651dd40260c5e9d844eb455d8508a07a1a6788802
-
Size
171KB
-
MD5
276fad7e5eefd9b1c66cc01fc3c92a40
-
SHA1
1bc546ded566d32b873600528ddcd19137cbd947
-
SHA256
68c31840060433b751b4ae1651dd40260c5e9d844eb455d8508a07a1a6788802
-
SHA512
e7930495cf3d517462e18fe2b87727e429b7094d1702b46cdb7ea51c08d141fd2cbd9be10f14db3710e5f55b5d5b0278e8e5312f4e6059ce6cd1201f9ac27684
-
SSDEEP
3072:UZFPw8Du42FQ6pi96GV4xBWR0odkEadv/S4xS9VUQof1YRCEySVvs:UZF3DsFQ6pi9exB0dk7/xiVjZySs
Malware Config
Signatures
Files
-
68c31840060433b751b4ae1651dd40260c5e9d844eb455d8508a07a1a6788802.exe windows x86
3e49a3b064ab6b62aa932288f1523cbb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strncpy
memcpy
_CIsinh
_CIatan
_CIlog10
floor
ceil
_CIpow
_CIlog
_CIacos
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
user32
CallWindowProcA
wsock32
closesocket
WSACleanup
WSAStartup
winmm
mciSendCommandA
Sections
.code Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ta Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
src Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ