Static task
static1
Behavioral task
behavioral1
Sample
f3145afa1d6b46e7f55f300bd07cf02ed2518aa20470cfc067f3f7dc1203fcd5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3145afa1d6b46e7f55f300bd07cf02ed2518aa20470cfc067f3f7dc1203fcd5.exe
Resource
win10v2004-20220812-en
General
-
Target
f3145afa1d6b46e7f55f300bd07cf02ed2518aa20470cfc067f3f7dc1203fcd5
-
Size
100KB
-
MD5
0740c5aaef1fe57f466fa320a62bae11
-
SHA1
7bd8a4c9ed26b5e04cfef679af9fa531df763ed0
-
SHA256
f3145afa1d6b46e7f55f300bd07cf02ed2518aa20470cfc067f3f7dc1203fcd5
-
SHA512
3f9daaa4b1a57af06b914edac386fd99964f30049f8214ce9cccdecaf88f6045305bac2d101040eefbb6e4528adbcd74148886649ba21cddbbdf17327e272886
-
SSDEEP
1536:7/43v2ZHBurM+avPgu2HoXC87NOE6rLG91LZ3Q1TprPd3urCZlGQ:83OZHBurMFXZ/6rK9tZ3yTprlugB
Malware Config
Signatures
Files
-
f3145afa1d6b46e7f55f300bd07cf02ed2518aa20470cfc067f3f7dc1203fcd5.exe windows x86
7280bfbf64c22e7354ebc9f14e025fd8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_getch
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
_except_handler3
_splitpath
_mbsnbcpy
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
_getcwd
getenv
_strdup
malloc
free
signal
__p__pgmptr
_mbsnbicmp
_ismbcspace
_mbsinc
_mbsnbcmp
strtoul
_mbstok
puts
printf
vprintf
_iob
fflush
exit
__setusermatherr
_adjust_fdiv
kernel32
SetConsoleTitleA
LoadLibraryA
GetProcAddress
GetCurrentProcess
SearchPathA
SetErrorMode
CreateProcessA
WaitForMultipleObjects
CreateFileA
DeviceIoControl
GenerateConsoleCtrlEvent
WaitForSingleObject
TerminateProcess
GetExitCodeProcess
GetCommandLineA
SetEnvironmentVariableA
GetTickCount
Sleep
CloseHandle
FreeLibrary
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ndata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE