Static task
static1
Behavioral task
behavioral1
Sample
875641c0c0bbe4f0d3ac2e38e876aa30e9cd9104f9cbc20a0047401ae45a9ca1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
875641c0c0bbe4f0d3ac2e38e876aa30e9cd9104f9cbc20a0047401ae45a9ca1.exe
Resource
win10v2004-20220812-en
General
-
Target
875641c0c0bbe4f0d3ac2e38e876aa30e9cd9104f9cbc20a0047401ae45a9ca1
-
Size
224KB
-
MD5
8352c8f22774388b9c4d81597a302c70
-
SHA1
a4a952ba9c55cec0983235d702672c14fa15d173
-
SHA256
875641c0c0bbe4f0d3ac2e38e876aa30e9cd9104f9cbc20a0047401ae45a9ca1
-
SHA512
4d6cfda562b79583095d1d864fa97aab69a87f057983b246e2d759bc53cf4cde3586811373235b51c5b1fd40dcddaa2002e9495a36991da9246941e8ea6d90a0
-
SSDEEP
3072:em2m3q8FNkt3nCIEH/6vrihURdz1Dz3VrqXilAzmFiAGHg8eE4Tg:tFC3nbEHyvjRdz1Dz3VrqXiGStGHT/v
Malware Config
Signatures
Files
-
875641c0c0bbe4f0d3ac2e38e876aa30e9cd9104f9cbc20a0047401ae45a9ca1.exe windows x86
eb48834a7c28bf85fc9b8804754f84e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
user32
MessageBoxA
msvcrt
malloc
fclose
fwrite
fread
perror
fopen
strspn
strcspn
fgets
strchr
strrchr
strncmp
__p___argv
getenv
free
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_iob
printf
exit
__initenv
fprintf
sprintf
__p___argc
__p__environ
_strdup
_stat
kernel32
GetStartupInfoA
QueryPerformanceFrequency
SetThreadLocale
GetModuleHandleA
GetSystemDefaultLCID
LoadLibraryA
GetProcAddress
GetModuleFileNameA
QueryPerformanceCounter
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 192KB - Virtual size: 1.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE