Static task
static1
Behavioral task
behavioral1
Sample
71306c804c9744aa78a998625b6cd25e5e83fdddc9c55ac013c0d0309fe0eb8f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
71306c804c9744aa78a998625b6cd25e5e83fdddc9c55ac013c0d0309fe0eb8f.exe
Resource
win10v2004-20220812-en
General
-
Target
71306c804c9744aa78a998625b6cd25e5e83fdddc9c55ac013c0d0309fe0eb8f
-
Size
73KB
-
MD5
1152aefdf8bae404c0c74eb38ae29c00
-
SHA1
252cfb986b4f990d4959047c97042a2b5a92aea4
-
SHA256
71306c804c9744aa78a998625b6cd25e5e83fdddc9c55ac013c0d0309fe0eb8f
-
SHA512
b201a5a742af6a03191872448b3f67709e4aaac8491260d743f19315f4673e1c56f5140fdd6c783328055365afcb0f4fb3a436252b2fbcc4c5e1c67dc8e5732e
-
SSDEEP
1536:dwV8go1CRvoCbGb7PkUm5V+T1PcVspIAE+fbWuiB+6lAN1i:dE8h1AvofkZ+RcVspQfTAN
Malware Config
Signatures
Files
-
71306c804c9744aa78a998625b6cd25e5e83fdddc9c55ac013c0d0309fe0eb8f.exe windows x86
4c286f7fc27658b6a9dddef2562c59e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegCloseKey
msvcr71
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
_onexit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
__dllonexit
??1type_info@@UAE@XZ
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
_callnewh
malloc
_splitpath
_except_handler3
__p___argv
__p___argc
_putenv
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_CxxThrowException
__CxxFrameHandler
??3@YAXPAX@Z
calloc
free
printf
_stat
_snprintf
memmove
_mbslwr
_mbsnbcmp
_mbschr
_mbsnbcpy
_mbsrchr
_mbsstr
_mbscmp
memset
__security_error_handler
__setusermatherr
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetStartupInfoA
lstrlenW
CreateFileA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetShortPathNameA
GetLongPathNameA
LoadLibraryA
GetProcAddress
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateProcessA
WaitForSingleObject
GetEnvironmentVariableA
GetLastError
GetSystemTimeAsFileTime
ole32
CoTaskMemFree
StringFromCLSID
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE