Static task
static1
Behavioral task
behavioral1
Sample
8889d656711b3d69ea13b0043fe1300dd80148df124dd5121495b38cf20f86a3.exe
Resource
win7-20220812-en
General
-
Target
8889d656711b3d69ea13b0043fe1300dd80148df124dd5121495b38cf20f86a3
-
Size
227KB
-
MD5
03d6df73d269bcee1d9f0ebbdeca513f
-
SHA1
3cbb5ed267a8bd0f8ecbdacfe1b15cc5eb1ce9dd
-
SHA256
8889d656711b3d69ea13b0043fe1300dd80148df124dd5121495b38cf20f86a3
-
SHA512
8a3d0444324288e39ce4fdf63b1a4d831e3f19956aa199aa1938006e1aec930bbea5d9c10d09c28c76be730022dea132964f532df3be7fd799cd49c75847fb20
-
SSDEEP
3072:nnBqCzSv51XbMifEqSY/kmhRNlcHnqAjq00alnYCum3tf2ms9oOcIwCCh6908ruA:Iv/rdfEWcmzAHwaeCb5goOkCCYrd7
Malware Config
Signatures
Files
-
8889d656711b3d69ea13b0043fe1300dd80148df124dd5121495b38cf20f86a3.exe windows x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE