Static task
static1
Behavioral task
behavioral1
Sample
d11000abb3d1ad7d5250bc8d1574d91a28743e2d816abb270d8882447c2db00d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d11000abb3d1ad7d5250bc8d1574d91a28743e2d816abb270d8882447c2db00d.exe
Resource
win10v2004-20221111-en
General
-
Target
d11000abb3d1ad7d5250bc8d1574d91a28743e2d816abb270d8882447c2db00d
-
Size
70KB
-
MD5
ddd9a0b285e313c72e02119edc751527
-
SHA1
e78dd8b70616559723587ca58f468c8a7eb19480
-
SHA256
d11000abb3d1ad7d5250bc8d1574d91a28743e2d816abb270d8882447c2db00d
-
SHA512
f543a8364baf283fcefcb22dd96b75a2f0f4b951a3f5188c188e5667faac24fd7e639b28a138d3753eef720caaf29fc15e4dc509af89b35431b1aa36fbdfe29c
-
SSDEEP
1536:zdXWIQHNltTQvdWv5uBcmHKswE/bec9THPk7wXDOJLJ7:zdXWIQHNltTQvdWv5uBcmHKsRKciJLJ7
Malware Config
Signatures
Files
-
d11000abb3d1ad7d5250bc8d1574d91a28743e2d816abb270d8882447c2db00d.exe windows x86
79c5d7378efc02443a75af6191e8482d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
avcodec
audio_resample
audio_resample_close
audio_resample_init
av_bitstream_filter_filter
av_bitstream_filter_init
av_fast_realloc
av_free_static
av_freep
av_get_double
av_get_pict_type_char
av_mallocz
av_opt_show
av_parser_change
av_resample_compensate
av_set_double
av_set_string
av_strdup
avcodec_alloc_context
avcodec_build
avcodec_close
avcodec_decode_audio
avcodec_decode_subtitle
avcodec_decode_video
avcodec_encode_audio
avcodec_encode_subtitle
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_get_frame_defaults
avcodec_get_pix_fmt
avcodec_open
avcodec_thread_init
avpicture_alloc
avpicture_deinterlace
avpicture_fill
avpicture_get_size
first_avcodec
img_copy
img_crop
img_pad
sws_freeContext
sws_getContext
sws_scale
first_avcodec
first_avcodec
first_avcodec
first_avcodec
first_avcodec
first_avcodec
first_avcodec
first_avcodec
first_avcodec
first_avcodec
first_avcodec
avformat
av_alloc_format_context
av_close_input_file
av_destruct_packet
av_destruct_packet_nofree
av_filename_number_test
av_find_input_format
av_find_stream_info
av_gettime
av_guess_codec
av_interleaved_write_frame
av_new_stream
av_open_input_file
av_pkt_dump
av_read_frame
av_register_all
av_seek_frame
av_set_parameters
av_write_header
av_write_trailer
dump_format
ffm_nopts
first_iformat
first_image_format
first_oformat
first_protocol
frame_hook_add
frame_hook_process
guess_format
parse_date
parse_frame_rate
parse_image_size
pstrcat
pstrcpy
strstart
url_exist
url_fclose
url_fopen
url_ftell
first_image_format
first_image_format
first_oformat
first_iformat
first_protocol
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
ffm_nopts
avutil
av_d2q
av_fifo_free
av_fifo_init
av_fifo_read
av_fifo_size
av_fifo_write
av_free
av_log
av_log_set_level
av_malloc
av_realloc
av_rescale
av_rescale_q
av_sub_q
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
Sleep
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_filbuf
_iob
_onexit
_setmode
_snprintf
abort
atexit
atof
atoi
exit
fclose
fflush
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
localtime
log
malloc
memcpy
memset
perror
printf
putchar
puts
signal
sscanf
strchr
strcmp
strcpy
strtod
strtok
strtol
time
toupper
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE