Static task
static1
Behavioral task
behavioral1
Sample
536289106117c48e7072fdd31aab47ff14a7b7f5b424fe988f4d25e8813602cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
536289106117c48e7072fdd31aab47ff14a7b7f5b424fe988f4d25e8813602cf.exe
Resource
win10v2004-20220812-en
General
-
Target
536289106117c48e7072fdd31aab47ff14a7b7f5b424fe988f4d25e8813602cf
-
Size
232KB
-
MD5
60efdf9fc851055680907e9999e61720
-
SHA1
f8b22f665cb1b7865a1d517c658701907e15829b
-
SHA256
536289106117c48e7072fdd31aab47ff14a7b7f5b424fe988f4d25e8813602cf
-
SHA512
91d915a7ff8d3cf10f593850b575d379bb2acc286a09a2ddbad445f0bde3d012c363ca54b0ed53c23019dc33359fff84d8e6acc7b543c88b2ea9ed60f1ad25f4
-
SSDEEP
3072:VVVQaIglv1lp3pQLUtOPeiaEhkTYy3Y+N9KBC5CH+xF7vCww95YeoLoSqtIzp:VjQyXTYY3uBC564ubYe5t
Malware Config
Signatures
Files
-
536289106117c48e7072fdd31aab47ff14a7b7f5b424fe988f4d25e8813602cf.exe windows x86
702a4c4630411bdc26b260034bd8fa6e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetProcAddress
FindFirstFileW
GetLastError
FindClose
FindNextFileW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
GetSystemTimeAsFileTime
msvcr80
_wtoi
qsort
fflush
wcsftime
wctomb
fputws
realloc
mbtowc
_strdup
putc
_errno
_read
_write
getc
strcmp
strncmp
strtod
strtol
isalnum
strrchr
sprintf
strlen
_snprintf
calloc
memmove
fopen
__iob_func
_vsnprintf
memset
memcpy
_localtime32
_time32
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
__winitenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
fseek
ftell
wcsncpy
wcstok
fwrite
wprintf
fread
_wfopen
_snwprintf
exit
fclose
_wsystem
malloc
free
_snwprintf_s
printf
fprintf
_CIpow
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�. Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE