Static task
static1
Behavioral task
behavioral1
Sample
cf5b778f134b85a4664f9f789a3f1e10d2114d58fe6ee93f95b7a04933812122.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cf5b778f134b85a4664f9f789a3f1e10d2114d58fe6ee93f95b7a04933812122.exe
Resource
win10v2004-20220901-en
General
-
Target
cf5b778f134b85a4664f9f789a3f1e10d2114d58fe6ee93f95b7a04933812122
-
Size
107KB
-
MD5
80ce18c0e5aeff33d8354f81d9a9dc90
-
SHA1
065f17608662ac2dfd65002e1cb6eff8bbb488e8
-
SHA256
cf5b778f134b85a4664f9f789a3f1e10d2114d58fe6ee93f95b7a04933812122
-
SHA512
ea3be685113a8aaeb8c88eadb1c655da144d1d303c8ed66d35fc425d295009f64a6a4be391f2fdd409d0ecfd979ea30b68c6295a75fb6c5c06dece5ac0595e31
-
SSDEEP
1536:wUPksWMkNHUjeZI2b0c+wNGpqEhWTv9sHmhGDqsgX9m/E9oOcw:+ckNHUjeZI2bKLpqYgVsHmE2ms9oOcw
Malware Config
Signatures
Files
-
cf5b778f134b85a4664f9f789a3f1e10d2114d58fe6ee93f95b7a04933812122.exe windows x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ