Static task
static1
Behavioral task
behavioral1
Sample
856b7980ce44ae042e6546b97d12c66f5042d06f222e17c50b5f2e90de717e66.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
856b7980ce44ae042e6546b97d12c66f5042d06f222e17c50b5f2e90de717e66.exe
Resource
win10v2004-20220812-en
General
-
Target
856b7980ce44ae042e6546b97d12c66f5042d06f222e17c50b5f2e90de717e66
-
Size
37KB
-
MD5
4b025c2306008a35255203aaac8e7d11
-
SHA1
457a8c0f0afcc8f7a90d0eaf8949edbd181544e4
-
SHA256
856b7980ce44ae042e6546b97d12c66f5042d06f222e17c50b5f2e90de717e66
-
SHA512
6d8ed24f237559802a4606055e336ee5688ec0f4ab381522bef37d7cef7492f1e51a6b318bbc5a8bf48c4f4d5feaf3b026592b51ac6f380a39eaf2c8ede46d73
-
SSDEEP
768:fL868R8Z8s888m8E8Qv07XCHgl18JIahb13h/EoPMufWmMWr2cgzr/oPo+Mx4s:zzq+5hRpfv07XCH8mIahlh/EoP9fJdrw
Malware Config
Signatures
Files
-
856b7980ce44ae042e6546b97d12c66f5042d06f222e17c50b5f2e90de717e66.exe windows x86
88318d0a74542a043a5bad06ad4fd2a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
fopen
fseek
fclose
strcmp
memmove
strncpy
_CIlog
malloc
free
ftell
fread
strlen
strcpy
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
LoadLibraryA
CreateFileA
GetFileSize
HeapAlloc
ReadFile
HeapFree
CloseHandle
Sleep
FreeLibrary
InitializeCriticalSection
GetModuleFileNameA
GetCommandLineA
GetLastError
HeapReAlloc
FlushFileBuffers
WriteConsoleA
WriteFile
user32
MessageBoxA
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ