Static task
static1
Behavioral task
behavioral1
Sample
10ed1e98f0cc618531e0f543e75bf5eac99cd5e0573904f60218403b56f6547b.exe
Resource
win7-20220812-en
General
-
Target
10ed1e98f0cc618531e0f543e75bf5eac99cd5e0573904f60218403b56f6547b
-
Size
233KB
-
MD5
5835e1bd225cd0ee705e8df3e64c617f
-
SHA1
f8ff3e09029c717f2e0182927ee55e238e2922df
-
SHA256
10ed1e98f0cc618531e0f543e75bf5eac99cd5e0573904f60218403b56f6547b
-
SHA512
e45027e001222507f87909df456aaa6662c480451e87897a4a4b6cac8d3d148f0b876690e0e2626ade5070625cf3a2dfebf009088333fa38ad3633df0a1c1a89
-
SSDEEP
3072:jWgLswHnKqzlpx/EVxlfvKT8wLKYw9G3xSorZUCG7S2rK4jNWPH/LHc5r7QkuU:jxgIKqspvKT8wLkeZUCG7SqK9/jHocBU
Malware Config
Signatures
Files
-
10ed1e98f0cc618531e0f543e75bf5eac99cd5e0573904f60218403b56f6547b.exe windows x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE