Static task
static1
Behavioral task
behavioral1
Sample
932a9d5754448abe0a0f1113d0a36f00065f1038ec664c2c465fc14ceb72cdee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
932a9d5754448abe0a0f1113d0a36f00065f1038ec664c2c465fc14ceb72cdee.exe
Resource
win10v2004-20220901-en
General
-
Target
932a9d5754448abe0a0f1113d0a36f00065f1038ec664c2c465fc14ceb72cdee
-
Size
331KB
-
MD5
08879f4a41e52d22ff8715d908d28d20
-
SHA1
467bc6c295981b64c1f2ccd86dfc193fca4433ee
-
SHA256
932a9d5754448abe0a0f1113d0a36f00065f1038ec664c2c465fc14ceb72cdee
-
SHA512
474946c0ef1910c564b26068b450dbae29b30c206ce43b5210749be86cffe579fa126dd325b82511e00af355ac2d1da58892ce39a3a0199d7d1ad0c8a1d353b7
-
SSDEEP
3072:Sik0bCpw5RCpw5RCpw5RCpw5RCpw5sANR4Cpw5sANR4Cpw5sANRVANRO:FkFw5Kw5Kw5Kw5Kw5sy1w5sy1w5sy/yg
Malware Config
Signatures
Files
-
932a9d5754448abe0a0f1113d0a36f00065f1038ec664c2c465fc14ceb72cdee.exe windows x86
4d5ffb3e78032b29e96bfa99d8ef0b2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
GetVolumeInformationA
GetTempFileNameA
Sleep
GetModuleFileNameA
GetTempPathA
CreateProcessA
GetTickCount
ExitProcess
CreateThread
GetLastError
CreateFileMappingA
GetModuleHandleA
GetStartupInfoA
msvcrt
fclose
ftell
fseek
fopen
toupper
fread
strcpy
calloc
_except_handler3
malloc
atoi
fputs
strlen
strcat
rand
strstr
strrchr
strcmp
memset
strtok
srand
__argv
__argc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
fwrite
_strdup
_strcmpi
_unlink
Sections
.bss Size: - Virtual size: 26KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE