Static task
static1
Behavioral task
behavioral1
Sample
039c859ce31da6b4faf42b16ec3cea4afacb3a9ee6291b8aefab59bb2d24ce71.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
039c859ce31da6b4faf42b16ec3cea4afacb3a9ee6291b8aefab59bb2d24ce71.exe
Resource
win10v2004-20220812-en
General
-
Target
039c859ce31da6b4faf42b16ec3cea4afacb3a9ee6291b8aefab59bb2d24ce71
-
Size
54KB
-
MD5
901fe2c9da370f952a6f21078b6dcd09
-
SHA1
a8a18c9e75c8d0edc39026b55d588f57ac59c8a1
-
SHA256
039c859ce31da6b4faf42b16ec3cea4afacb3a9ee6291b8aefab59bb2d24ce71
-
SHA512
fc5aa967312b24e4f05a34eca9e70031953f98e5ddb2af336101bf8df467be2887a5a6521a816a102a380464e2d29724aaeec557c74841c881af854dfc6a0bfd
-
SSDEEP
384:6TiTHAVIOlQENuk+EkBLaqie1SJk3Bnkb:NgJBSGSSJWnkb
Malware Config
Signatures
Files
-
039c859ce31da6b4faf42b16ec3cea4afacb3a9ee6291b8aefab59bb2d24ce71.exe windows x86
a413c8b2ccf24fdf935b997a4ba49afb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
SizeofResource
FindResourceA
LoadLibraryA
GetProcAddress
CloseHandle
WriteFile
CreateFileA
ReadFile
GetFileSize
DeleteFileA
SetFilePointer
MoveFileA
GlobalFree
CopyFileA
CreateProcessA
GetCommandLineA
GetStartupInfoA
FindClose
GetLastError
FindNextFileA
Sleep
FreeLibrary
lstrcpyA
lstrcatA
GetSystemDirectoryA
TerminateProcess
ResumeThread
SetThreadContext
GetModuleHandleA
lstrcmpiA
GetModuleFileNameA
GetThreadContext
GetTickCount
SetFileAttributesA
CreateDirectoryA
CreateThread
GetDriveTypeA
GetLogicalDriveStringsA
ExitThread
GetDiskFreeSpaceExA
CreateMutexA
ExitProcess
GetTempPathA
GetCurrentThreadId
BeginUpdateResourceA
UpdateResourceA
FindFirstFileA
EndUpdateResourceA
user32
GetInputState
PostThreadMessageA
DestroyIcon
GetMessageA
msvcrt
_stricmp
free
malloc
??3@YAXPAX@Z
strstr
??2@YAPAXI@Z
atoi
strtok
sprintf
realloc
printf
rename
fopen
rand
srand
time
strchr
fclose
fwrite
strncmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_access
advapi32
ChangeServiceConfig2A
CloseServiceHandle
ChangeServiceConfigA
iphlpapi
GetAdaptersInfo
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ