Static task
static1
Behavioral task
behavioral1
Sample
a00c63910a8b06a31381792f88cce82ba24b11ec76672e532048a2ac00068b29.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a00c63910a8b06a31381792f88cce82ba24b11ec76672e532048a2ac00068b29.exe
Resource
win10v2004-20220812-en
General
-
Target
a00c63910a8b06a31381792f88cce82ba24b11ec76672e532048a2ac00068b29
-
Size
134KB
-
MD5
559f98b9450925ef45469d016543fc74
-
SHA1
5c8163589e6eda4c0bc39b9816ab201225d8486f
-
SHA256
a00c63910a8b06a31381792f88cce82ba24b11ec76672e532048a2ac00068b29
-
SHA512
2a7499dbc86f8be74dd9cfe34c3a9477c34d875ab72c841669147d038d1e14eac8dbafac598b56c2dcfb5ad736cb66e46e754a9097c1ab9d132015d2f0dd7a2c
-
SSDEEP
3072:etX6/k+hEx8kDNSVNsmf9xd9UaVFT/r0aNYmf0:ex6/k+eiNDdqsFTDDE
Malware Config
Signatures
Files
-
a00c63910a8b06a31381792f88cce82ba24b11ec76672e532048a2ac00068b29.exe windows x86
62968601794b9a0fdbedc167acbe2145
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
Sleep
lstrlenA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringA
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
DeleteFileA
MoveFileA
FreeResource
WriteFile
SizeofResource
SetFileTime
LocalFileTimeToFileTime
FindFirstFileA
lstrcatA
GetSystemDirectoryA
LoadResource
FindResourceA
GetTickCount
GetTempPathA
SetLastError
lstrcpyA
GetLastError
HeapFree
GetProcAddress
GetModuleHandleA
HeapAlloc
GetProcessHeap
ExitProcess
LockResource
GetCurrentThreadId
WinExec
CreateDirectoryA
GetFileAttributesA
SetUnhandledExceptionFilter
GetWindowsDirectoryA
GetCommandLineA
LoadLibraryA
FreeLibrary
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA
user32
GetInputState
PostThreadMessageA
GetMessageA
BlockInput
PostQuitMessage
DefWindowProcA
wsprintfA
GetDesktopWindow
GetTopWindow
GetWindowRect
WindowFromPoint
CreateWindowExA
SendMessageA
IsWindow
SetForegroundWindow
GetWindow
GetClassNameA
GetWindowTextA
SetCursorPos
mouse_event
GetCursorPos
msvcrt
_strcmpi
_strnicmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
??2@YAPAXI@Z
memset
strlen
??3@YAXPAX@Z
memcpy
__CxxFrameHandler
_except_handler3
fclose
fwrite
fopen
rand
strchr
strstr
realloc
malloc
strcat
strncat
strcpy
??1type_info@@UAE@XZ
_exit
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ