Static task
static1
Behavioral task
behavioral1
Sample
34fdecd2188bbef6cef00c8902e2e92b27729f905ad60c7303e5256e6e7b1618.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
34fdecd2188bbef6cef00c8902e2e92b27729f905ad60c7303e5256e6e7b1618.exe
Resource
win10v2004-20220901-en
General
-
Target
34fdecd2188bbef6cef00c8902e2e92b27729f905ad60c7303e5256e6e7b1618
-
Size
265KB
-
MD5
425c3f5ac55d51d50c5579fa46d39300
-
SHA1
c1005231f21037859bcf954792e283e82639e4e1
-
SHA256
34fdecd2188bbef6cef00c8902e2e92b27729f905ad60c7303e5256e6e7b1618
-
SHA512
74a495fa091ad111980568fe2c6289d2b45c2fced5249ea5cf4bde18022176ee6d61510fc6d358173475fda02284ff7fac281a3b1eb6d139d30bb806473743e4
-
SSDEEP
3072:hIlCISre9D4gzfn4xbtxViFHR7fjI2R7cU/yc1cmyyQrZ:KIrEx4LUxvI2pyc1byPt
Malware Config
Signatures
Files
-
34fdecd2188bbef6cef00c8902e2e92b27729f905ad60c7303e5256e6e7b1618.exe windows x86
1d2c581fe81151cc592d30c3157d4842
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetLastError
OutputDebugStringA
GetTickCount
VirtualProtect
VirtualQuery
WideCharToMultiByte
GetStartupInfoA
GetModuleHandleA
user32
MessageBoxA
msvcrt
exit
strtok
??2@YAPAXI@Z
_except_handler3
strstr
??3@YAXPAX@Z
free
malloc
wcslen
wcsrchr
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_stricmp
ws2_32
gethostbyname
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 254KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE