Static task
static1
Behavioral task
behavioral1
Sample
f1a6ae112426062bc3f699ca12e948366f55bcf73d112a1c000871b6d8770521.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1a6ae112426062bc3f699ca12e948366f55bcf73d112a1c000871b6d8770521.exe
Resource
win10v2004-20220901-en
General
-
Target
f1a6ae112426062bc3f699ca12e948366f55bcf73d112a1c000871b6d8770521
-
Size
738KB
-
MD5
7a6d696cc086cc44c8aa4334a70edabe
-
SHA1
40495e316c461cdf1aa59a926c842bc466554a85
-
SHA256
f1a6ae112426062bc3f699ca12e948366f55bcf73d112a1c000871b6d8770521
-
SHA512
3a35e18c5c75095257b234bce4ca09fe7d7c18c079a72305ef40fd7d40c7c43ba3e33d3dcf244a119a1208563dc3aa802e561100e6e575fef60bb055be6ffe00
-
SSDEEP
12288:lb2d0worgWVl/onrCfb+fEsJOYmDDFlQooFXLZoJPtetu9b48lYkBh7q2O8:9smgWZOE1D/pCbaJ1tb4UPO8
Malware Config
Signatures
Files
-
f1a6ae112426062bc3f699ca12e948366f55bcf73d112a1c000871b6d8770521.exe windows x86
3eaf43c1975d8bf7af9fafc78fcfdba5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ulib
?Initialize@WSTRING@@QAEEPBV1@KK@Z
??1PATH@@UAE@XZ
?Initialize@WSTRING@@QAEEPBGK@Z
?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
??0LONG_ARGUMENT@@QAE@XZ
?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z
?Initialize@LONG_ARGUMENT@@QAEEPAD@Z
?Initialize@ARRAY@@QAEEKK@Z
?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ
?Initialize@FSN_FILTER@@QAEEXZ
?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
?Put@ARRAY@@UAEEPAVOBJECT@@@Z
?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z
msvcrt
__getmainargs
_initterm
free
__initenv
_adjust_fdiv
??3@YAXPAX@Z
_XcptFilter
toupper
time
_pctype
realloc
__setusermatherr
strncmp
kernel32
LocalAlloc
GetVersionExA
LoadLibraryA
ExitProcess
GetModuleHandleA
GetFileType
ExitThread
lstrcatW
lstrcpyA
GetCommandLineA
GetStdHandle
VirtualFree
WriteFile
lstrcmpW
FormatMessageW
FindFirstFileW
SetErrorMode
lstrcpynW
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ