Static task
static1
Behavioral task
behavioral1
Sample
f00c5d411f59f2e939d8e5a19a01a2f8f1c0d5eaec0f26c2b89c16d938cb3993.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f00c5d411f59f2e939d8e5a19a01a2f8f1c0d5eaec0f26c2b89c16d938cb3993.exe
Resource
win10v2004-20220812-en
General
-
Target
f00c5d411f59f2e939d8e5a19a01a2f8f1c0d5eaec0f26c2b89c16d938cb3993
-
Size
36KB
-
MD5
93b903c4a125a993031cd879e7491980
-
SHA1
6a5559be981d43c2f1ded4edaab91cab7d79c91e
-
SHA256
f00c5d411f59f2e939d8e5a19a01a2f8f1c0d5eaec0f26c2b89c16d938cb3993
-
SHA512
979de9de34dacbb622e8f5dd199040d0f3108c59b1cd84b9fda722da50bc69d86153eb336ef7389595088ec18dcbec67a245cabd01f6d7d85aeeb787c6b089c3
-
SSDEEP
384:WtCKE/pfqm0GMAPX3G0Z6Sc7gfw246+mdjp3UhULsoKuJNX/JDauZl17iRbsj:WVEhr0ZAPHG0ZhJ461FxXhDj6bsj
Malware Config
Signatures
Files
-
f00c5d411f59f2e939d8e5a19a01a2f8f1c0d5eaec0f26c2b89c16d938cb3993.exe windows x86
71739f0959953507f2e40589eab34bfb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_acmdln
__set_app_type
_except_handler3
_controlfp
exit
_XcptFilter
_exit
strncmp
atoi
strncpy
_access
??2@YAPAXI@Z
malloc
realloc
??3@YAXPAX@Z
__p__fmode
free
_stricmp
kernel32
GetModuleHandleA
LocalAlloc
LocalFree
Sleep
lstrlenA
FreeLibrary
VirtualFree
GetProcessHeap
HeapFree
LoadLibraryA
VirtualAlloc
GetProcAddress
GetStartupInfoA
user32
GetInputState
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 954B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ