Static task
static1
Behavioral task
behavioral1
Sample
33e96c20a6bc57bb9b012ad2713a4d180afd85b6f6f39af7047170437458dabe.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
33e96c20a6bc57bb9b012ad2713a4d180afd85b6f6f39af7047170437458dabe.exe
Resource
win10v2004-20220901-en
General
-
Target
33e96c20a6bc57bb9b012ad2713a4d180afd85b6f6f39af7047170437458dabe
-
Size
2.4MB
-
MD5
6223a98cfaa215693e47aee875043f04
-
SHA1
6f4f4eb13d7826a53cd324c0e6e929313400a778
-
SHA256
33e96c20a6bc57bb9b012ad2713a4d180afd85b6f6f39af7047170437458dabe
-
SHA512
3298ac5e44fb087dcbf7db8a57bff52cd74b7a890d428dbd18974f4f28bd26c9e14f3c1358c2a6ed5d5f50ec4ef91fcbe97958b1f350af17a0164bb9c90b5ca3
-
SSDEEP
24576:hsDgKtLMlQQnJ4UvTwBpHeCmKSDKcr6s1A:hSgKtQKKJ7TwnyOs1A
Malware Config
Signatures
Files
-
33e96c20a6bc57bb9b012ad2713a4d180afd85b6f6f39af7047170437458dabe.exe windows x86
5b002c42510b2f2a73b35f4d2e728335
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetTempPathA
GetModuleFileNameA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime
user32
wsprintfA
shell32
ShellExecuteA
msvcp71
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
msvcr71
fopen
__security_error_handler
_except_handler3
_c_exit
_exit
_XcptFilter
_ismbblead
fseek
exit
_acmdln
fread
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
fwrite
_amsg_exit
fclose
_cexit
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ