Static task
static1
Behavioral task
behavioral1
Sample
734e035459b9d52b5840404231a6b8673cc9799be0c94263bdede4f71bff1e2b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
734e035459b9d52b5840404231a6b8673cc9799be0c94263bdede4f71bff1e2b.exe
Resource
win10v2004-20220812-en
General
-
Target
734e035459b9d52b5840404231a6b8673cc9799be0c94263bdede4f71bff1e2b
-
Size
152KB
-
MD5
450eef1e0232a77bd8d48f0de6288410
-
SHA1
cffac584d17c9039c6908a974e1678f8d101906c
-
SHA256
734e035459b9d52b5840404231a6b8673cc9799be0c94263bdede4f71bff1e2b
-
SHA512
8cbd2ee89d35dc3c567ff1ee91e6530050de2299e58967c0ffe7e678eb232ad644011dc4c75d20e92f341ad41d4859cf32e0b5e04f1c36d21aed6fb3dc762825
-
SSDEEP
1536:5SWHPzefYd+6bBeTE7+PsobZXxhW3xPaNvcXs/FD0n/bcg6kl40o8Iw9XDZk/YWV:g2zwO+l8x4tWcvcc/o/1KDk+YscoT
Malware Config
Signatures
Files
-
734e035459b9d52b5840404231a6b8673cc9799be0c94263bdede4f71bff1e2b.exe windows x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ