Static task
static1
Behavioral task
behavioral1
Sample
5bebd498d58690441d0c5f638920b1d861fa74a8bf710a31bf22562f082b79fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5bebd498d58690441d0c5f638920b1d861fa74a8bf710a31bf22562f082b79fc.exe
Resource
win10v2004-20220812-en
General
-
Target
5bebd498d58690441d0c5f638920b1d861fa74a8bf710a31bf22562f082b79fc
-
Size
132KB
-
MD5
069c3409e9c2442f2150e2d940938465
-
SHA1
49d61dfae5017934c232ec58ca1f660cf6dfb5c5
-
SHA256
5bebd498d58690441d0c5f638920b1d861fa74a8bf710a31bf22562f082b79fc
-
SHA512
618e3b24ae19eeece6d9178508ee7e5554ec96f9773540421464fbad7d523b340e8748b9d211e5ea2691be394738bc37710d3ee5a65c746b79bda1dde35fd4e0
-
SSDEEP
3072:JYtWdbDGqQlJhAc7MMejEhlN6gCJyZNzplqXaz:JYtWdbajJSUtzN6pyLzaXa
Malware Config
Signatures
Files
-
5bebd498d58690441d0c5f638920b1d861fa74a8bf710a31bf22562f082b79fc.exe windows x86
cab48b9f1a24258d70b0eb3d2f765f50
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strcpy
strncat
strcat
_except_handler3
rand
putchar
_access
free
mbstowcs
wcslen
wcstombs
atoi
wcscpy
_beginthreadex
vsprintf
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
exit
fopen
fwrite
fclose
strcmp
malloc
strrchr
memcmp
??2@YAPAXI@Z
memset
__CxxFrameHandler
strlen
_ftol
memmove
calloc
??3@YAXPAX@Z
kernel32
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetModuleHandleA
lstrlenA
MultiByteToWideChar
WinExec
SetEvent
Sleep
LoadLibraryA
GetProcAddress
GetLastError
Sections
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PAGE Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
mian Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
cccc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ