Static task
static1
Behavioral task
behavioral1
Sample
be5006bdb8819bd9129699adb7ab37e1d49b3d91c4f0915abb0456ba4cbd24c2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
be5006bdb8819bd9129699adb7ab37e1d49b3d91c4f0915abb0456ba4cbd24c2.exe
Resource
win10v2004-20220812-en
General
-
Target
be5006bdb8819bd9129699adb7ab37e1d49b3d91c4f0915abb0456ba4cbd24c2
-
Size
151KB
-
MD5
84a37a746a2d5742ece5b7da846eb260
-
SHA1
751fe59e843a11ff40a8b974cdbc4903cae47d53
-
SHA256
be5006bdb8819bd9129699adb7ab37e1d49b3d91c4f0915abb0456ba4cbd24c2
-
SHA512
c7f0a875b2e07e62867b9bd643bc9a9f0279cdaf37d0e12300b6e1c97d01d47ba6b55b01bd8a9aa9acab399cc89bd328ca2173ae21717f5e247f6c667c187cdb
-
SSDEEP
3072:Y6s/T4kDWVsAD1wJRUnO4+1Tjhq5L8zKOxmzLlTMpmUWqBGsJG:Y6s/BDL81khbYL8zhaZw4nsJG
Malware Config
Signatures
Files
-
be5006bdb8819bd9129699adb7ab37e1d49b3d91c4f0915abb0456ba4cbd24c2.exe windows x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ