Static task
static1
Behavioral task
behavioral1
Sample
96eb573cd4059ba0168a488e6a24dd3f550449a8d548cce54ed6385ddfb3582a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
96eb573cd4059ba0168a488e6a24dd3f550449a8d548cce54ed6385ddfb3582a.exe
Resource
win10v2004-20220812-en
General
-
Target
96eb573cd4059ba0168a488e6a24dd3f550449a8d548cce54ed6385ddfb3582a
-
Size
56KB
-
MD5
0e3928d4231ee65b80be63485d4d2a91
-
SHA1
f41312447f0f9611020460c3a7c8839f8f32dba9
-
SHA256
96eb573cd4059ba0168a488e6a24dd3f550449a8d548cce54ed6385ddfb3582a
-
SHA512
f16f00380348e855f04380250212706dee165c8de412820240ab96555ee06d079f0026887159c3eff1e5233b6b6ec82db5309a67b44c86f33c87dbe47017ef9c
-
SSDEEP
768:m7g8U6WPTieG2Urz77ecbJ2RLRThycEPQHW2BZM0s8Cwxpr0HoV:m7g8UUrbbJELRRF6SrooV
Malware Config
Signatures
Files
-
96eb573cd4059ba0168a488e6a24dd3f550449a8d548cce54ed6385ddfb3582a.exe windows x86
c51f1f7e2ef11eaa40e00eec30845a57
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
GetProcAddress
LoadLibraryA
TerminateProcess
CreateProcessA
ExitThread
Sleep
CreateThread
FreeLibrary
CloseHandle
GetCurrentProcess
ExitProcess
SetFileAttributesA
GetModuleFileNameA
ReleaseMutex
GetLastError
OpenMutexA
lstrlenA
lstrcpynA
BeginUpdateResourceA
ReadFile
GlobalAlloc
GetFileSize
GetFileAttributesA
WaitForSingleObject
CreateMutexA
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA
GetModuleHandleA
LocalFree
msvcrt
atoi
strncpy
strcspn
sprintf
localtime
time
strncmp
_except_handler3
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
_CxxThrowException
__CxxFrameHandler
rand
??2@YAPAXI@Z
strstr
malloc
Sections
.data Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ