Static task
static1
Behavioral task
behavioral1
Sample
a1320c77098e1ac7c11cf3d7a721b9305f51fcef25558ea22701f25121ab36ca.exe
Resource
win7-20220901-en
General
-
Target
a1320c77098e1ac7c11cf3d7a721b9305f51fcef25558ea22701f25121ab36ca
-
Size
223KB
-
MD5
257f820cc4e811852165b5cf55796940
-
SHA1
d246f4e7a1a5c14a77524f0047f6ebe3f14eabb8
-
SHA256
a1320c77098e1ac7c11cf3d7a721b9305f51fcef25558ea22701f25121ab36ca
-
SHA512
6751be57dbb2cfd01d9a5dd013a65b08f036511f3d5ce61109108c3d21a433b82879425e185f2dfd6c49689dcc831022039cc069e803c29150d4acc7836a9c1a
-
SSDEEP
3072:Rvxmd7+SDz0W1/dskafXXyIjuPr/9ePc0W8PdB0WE0ncumifRJ+ju:RvkdDn0W1lIKuuPR90ZkymifGj
Malware Config
Signatures
Files
-
a1320c77098e1ac7c11cf3d7a721b9305f51fcef25558ea22701f25121ab36ca.exe windows x86
31c2f6b2fb03def325686e0b800a648a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
ntohl
ntohs
htonl
htons
kernel32
GetProcAddress
FreeLibrary
LocalAlloc
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
CreateEventA
CreateMutexA
SetEvent
ExitProcess
Sleep
CloseHandle
WaitForSingleObject
InterlockedIncrement
InterlockedDecrement
CreateThread
ResetEvent
RaiseException
InterlockedExchange
FormatMessageA
GetModuleHandleA
LoadLibraryA
ExitThread
OutputDebugStringA
GetLastError
TlsAlloc
TlsFree
ReleaseMutex
TlsGetValue
TlsSetValue
GetPrivateProfileIntA
GetStartupInfoA
DeleteCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
LocalFree
WaitForMultipleObjects
GetCurrentThreadId
CreateFileMappingA
OpenFileMappingA
ReleaseSemaphore
UnmapViewOfFile
CreateSemaphoreA
MapViewOfFile
user32
DispatchMessageA
TranslateMessage
GetDesktopWindow
GetMessageA
MessageBoxA
advapi32
RegCreateKeyA
RegSetValueExA
msvcp60
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Xran@std@@YAXXZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
msvcrt
_exit
isspace
strncpy
getenv
vsprintf
time
strftime
localtime
sprintf
fopen
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
memmove
strncmp
clock
free
__dllonexit
_onexit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_controlfp
_beginthread
??2@YAPAXI@Z
_iob
fprintf
__CxxFrameHandler
_purecall
_itoa
_ltoa
_ftime
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE