Static task
static1
Behavioral task
behavioral1
Sample
56b279eb3c52fcb8f418848bdccdcc6b9b920ca5301d4d8845080ed57d497893.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56b279eb3c52fcb8f418848bdccdcc6b9b920ca5301d4d8845080ed57d497893.exe
Resource
win10v2004-20220812-en
General
-
Target
56b279eb3c52fcb8f418848bdccdcc6b9b920ca5301d4d8845080ed57d497893
-
Size
248KB
-
MD5
a0fced0f60cdc45bdbba87156ec368e1
-
SHA1
ad6aab01500dd3eff06c8af0c59d4b82996a0626
-
SHA256
56b279eb3c52fcb8f418848bdccdcc6b9b920ca5301d4d8845080ed57d497893
-
SHA512
db43fa7db98be6b8586469f31e3fc0159fa31dad74b35e395ff12136e49e643db18766593ef9eb5ca8f9f453e32ec8e1ffa2e8741e1dd7be7065d0288a398c33
-
SSDEEP
6144:LOk+AcAZv7AfDxzSW3aILXCozIQWzEiwEGKwtX:Lz+CSxW6xrIQWpQX
Malware Config
Signatures
Files
-
56b279eb3c52fcb8f418848bdccdcc6b9b920ca5301d4d8845080ed57d497893.exe windows x86
cccc186a6e6be318b9939867ff00f3b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memmove
_CItanh
_CIasin
floor
ceil
gmtime
memcpy
strlen
kernel32
GetModuleHandleA
HeapCreate
GetThreadPriority
GetExitCodeThread
HeapDestroy
ExitProcess
GetExitCodeProcess
FreeLibrary
HeapReAlloc
HeapAlloc
HeapFree
WideCharToMultiByte
gdi32
DeleteDC
wsock32
closesocket
WSACleanup
WSAStartup
Sections
.code Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ