Static task
static1
Behavioral task
behavioral1
Sample
c3369097317cbfbfa8838d89f6da0ba169e33c33c532e9a8d479914cd91c83e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3369097317cbfbfa8838d89f6da0ba169e33c33c532e9a8d479914cd91c83e5.exe
Resource
win10v2004-20220812-en
General
-
Target
c3369097317cbfbfa8838d89f6da0ba169e33c33c532e9a8d479914cd91c83e5
-
Size
112KB
-
MD5
a2dbea195b63da64a6ae854380f47300
-
SHA1
3bac25f3c941abc723e4181dbd687e0eb8274d87
-
SHA256
c3369097317cbfbfa8838d89f6da0ba169e33c33c532e9a8d479914cd91c83e5
-
SHA512
5237f3e7c5f892e8a65399c5fdbac4fce6fbed65811b40dcfb87b8748379adb1ae70649b6ae268ea7d09ebf132ff7c9e6e7dce6701dff98e360d9724b91e15c2
-
SSDEEP
1536:t3LwtGumfsjZsybFZBNihdcmXVOX7q3bwMbBNxuK80fq38FAMq1FfTQtW7O:t7w7FljNiwmsGcMlNxuK80CCa1Ff
Malware Config
Signatures
Files
-
c3369097317cbfbfa8838d89f6da0ba169e33c33c532e9a8d479914cd91c83e5.exe windows x86
44defe9d1e2d506fc46e623fb52b0b43
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr71
_cexit
exit
__p___winitenv
_amsg_exit
__wgetmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
_exit
_c_exit
__security_error_handler
_vsnwprintf
_snwprintf
_except_handler3
??_U@YAPAXI@Z
wcschr
swprintf
wcscat
wcslen
wcstok
wcscmp
printf
memset
_wcsicmp
wcscpy
wcsncat
??_V@YAXPAX@Z
_adjust_fdiv
scanf
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
WriteConsoleW
GlobalAlloc
GlobalReAlloc
GlobalFree
GetModuleHandleA
GetVersionExA
ExitProcess
GetLastError
GetStdHandle
GetSystemTimeAsFileTime
user32
LoadStringW
LoadStringA
advapi32
RegOpenKeyExW
RegCloseKey
RegSetKeySecurity
RegQueryValueExW
RegGetKeySecurity
odbc32
ord139
ord24
ord75
ord9
ord155
ord31
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|k�TA� Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE