Static task
static1
Behavioral task
behavioral1
Sample
c23f5965186c2fcb13d90382e5895f9c735e4dcd96b154ff1ca031231c417b54.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c23f5965186c2fcb13d90382e5895f9c735e4dcd96b154ff1ca031231c417b54.exe
Resource
win10v2004-20220812-en
General
-
Target
c23f5965186c2fcb13d90382e5895f9c735e4dcd96b154ff1ca031231c417b54
-
Size
124KB
-
MD5
0f7cf941df01f4e256467885dbbea5bf
-
SHA1
583335a354465e979a62dbedb92ba03854e5d05c
-
SHA256
c23f5965186c2fcb13d90382e5895f9c735e4dcd96b154ff1ca031231c417b54
-
SHA512
a1e457f17cc3dc647121bfda3289b3938e5541b9f9fa480dd27935b0c953048b9cdfd8dd63e7e092933aa6916ac225e600f82fb23b53f276a1044fe3c06fb1f1
-
SSDEEP
3072:o4lJBXrvafY3yL3VgvnipUy7aAoVwc6IhKWP:RlnbvaWyOPi/aAoVw5IhKWP
Malware Config
Signatures
Files
-
c23f5965186c2fcb13d90382e5895f9c735e4dcd96b154ff1ca031231c417b54.exe windows x86
de02015cceda1af9860a4e07d9750fcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
msvcrt
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
printf
atol
memset
srand
rand
strlen
malloc
strcpy
__setusermatherr
kernel32
GetStartupInfoA
ExitProcess
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetCommandLineA
CreateProcessA
lstrcmpA
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE