Static task
static1
Behavioral task
behavioral1
Sample
5c509cfb7dc86a49cb77014231052478a4deaa589a2a3c5dc0290df45e3b64d2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5c509cfb7dc86a49cb77014231052478a4deaa589a2a3c5dc0290df45e3b64d2.exe
Resource
win10v2004-20220812-en
General
-
Target
5c509cfb7dc86a49cb77014231052478a4deaa589a2a3c5dc0290df45e3b64d2
-
Size
151KB
-
MD5
0ad90359c1cb773c2a8d6b0eac05a338
-
SHA1
af5eff400a0e2c93f059bdcd2a39ac8cf0f21b12
-
SHA256
5c509cfb7dc86a49cb77014231052478a4deaa589a2a3c5dc0290df45e3b64d2
-
SHA512
186c357b2556f9c52e2f5ee157dfe2e4c8d9184bfe31f9d6019485066358582aa023a4bc947e7b026bc0207a4ec7033d7b2927a6ef16d97a2527c378f78dc4a1
-
SSDEEP
3072:Z00UDh9O+TuqdXevMO4eRsHz/g5tYREb5FF:JUF9OIuRvM7hT4QKb5FF
Malware Config
Signatures
Files
-
5c509cfb7dc86a49cb77014231052478a4deaa589a2a3c5dc0290df45e3b64d2.exe windows x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ