Static task
static1
Behavioral task
behavioral1
Sample
805ff6de5cb069574082fbac98853ac07bd3b7e56113a281f54423c9236430c5.exe
Resource
win7-20221111-en
General
-
Target
805ff6de5cb069574082fbac98853ac07bd3b7e56113a281f54423c9236430c5
-
Size
177KB
-
MD5
30310b9f9616bb04ce0d1e444c84c5c0
-
SHA1
42e35051a1c7a1cc1202576716e3c61229e78478
-
SHA256
805ff6de5cb069574082fbac98853ac07bd3b7e56113a281f54423c9236430c5
-
SHA512
d507feabbc9da1f1fe21ca1509370b4dabe91326a8cc9f3383a4fa1a31aa2e2e3615b7c49bad9bca503257a9548a8e0b2e5a01b9d9e8cb8612d4c343fdf11dfe
-
SSDEEP
3072:vJ2sagiMkRPMfqkjl4jJ4aZ20s2lhPowvO79cYZHDHwIe7WlbHwNvajCg:vos/iMkRPMSkc2xsWFcYZHk6lbwNijCg
Malware Config
Signatures
Files
-
805ff6de5cb069574082fbac98853ac07bd3b7e56113a281f54423c9236430c5.exe windows x86
1f9d26c9f1930f00367fdb505f9c2b0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FormatMessageA
GetModuleHandleA
CloseHandle
MultiByteToWideChar
CreateFileA
DeleteFileA
WriteFile
SystemTimeToFileTime
GetSystemTime
GetCPInfo
SetFilePointer
GetFileSize
GetLastError
ReadFile
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
msacm32
acmStreamConvert
acmFormatDetailsA
acmFormatTagDetailsA
acmStreamClose
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmFormatSuggest
winmm
mmioClose
mmioSeek
mmioOpenA
mmioDescend
mmioRead
mmioAscend
rpcrt4
UuidCreate
user32
CharToOemA
LoadStringA
msvcrt
tmpnam
??3@YAXPAX@Z
??2@YAPAXI@Z
printf
sscanf
fclose
fgets
fopen
_ftol
_mbscpy
_mbslen
_stricmp
_mbsicmp
strrchr
wcscpy
wcslen
wcscmp
_purecall
_CxxThrowException
__CxxFrameHandler
_EH_prolog
strncpy
_mbsrchr
sprintf
calloc
free
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
_controlfp
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE