Static task
static1
Behavioral task
behavioral1
Sample
35ec39b7ff5d7db46dfc3721caa77b72435f44ca772abfb3ea92e6dd243da2b3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
35ec39b7ff5d7db46dfc3721caa77b72435f44ca772abfb3ea92e6dd243da2b3.exe
Resource
win10v2004-20220812-en
General
-
Target
35ec39b7ff5d7db46dfc3721caa77b72435f44ca772abfb3ea92e6dd243da2b3
-
Size
152KB
-
MD5
16007cdb77f7b79423eee8d188dfd820
-
SHA1
55231e03da5cf7c7ac1e1cea32b82cf6777f3408
-
SHA256
35ec39b7ff5d7db46dfc3721caa77b72435f44ca772abfb3ea92e6dd243da2b3
-
SHA512
9821694fb1bece762fa958738b34d6e62fca0572344c8982bfb205c15216976b9086b2e3ae50ae7c53b498d744488ecc425fa3d209cd108eccd54d5fbca19c9c
-
SSDEEP
3072:dluNk26xekce/9HJAqqwNcZLZblSmDhudwLSaYxx3:zuNk26x5ce/UKN6Vbsku0SNP
Malware Config
Signatures
Files
-
35ec39b7ff5d7db46dfc3721caa77b72435f44ca772abfb3ea92e6dd243da2b3.exe windows x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ