Static task
static1
Behavioral task
behavioral1
Sample
28a19f7d76bfc4d37f8aa1c9cc674f14531ea74cffb945e03cc37f80857e2839.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
28a19f7d76bfc4d37f8aa1c9cc674f14531ea74cffb945e03cc37f80857e2839.exe
Resource
win10v2004-20220812-en
General
-
Target
28a19f7d76bfc4d37f8aa1c9cc674f14531ea74cffb945e03cc37f80857e2839
-
Size
157KB
-
MD5
a34c9be3577ce81bca89b7047e9a83cd
-
SHA1
329c4704f203a40769d82690753a53808e137287
-
SHA256
28a19f7d76bfc4d37f8aa1c9cc674f14531ea74cffb945e03cc37f80857e2839
-
SHA512
08405d4204848a422598b7c33d0c32afec355e610bf28bd89aeba0afea0290973732544643bd7f091702af4a85c1d60cf1de2b3d0a474e4bdf02ee6a622fa219
-
SSDEEP
1536:Ue5dNuLlattptOule2wZI7wOGjzlFiU4rn33kAziQCS2pxXn7vUf0/pi7otN0nq:v5H2aTpdaL4zF6fXn7xpi7rq
Malware Config
Signatures
Files
-
28a19f7d76bfc4d37f8aa1c9cc674f14531ea74cffb945e03cc37f80857e2839.exe windows x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ