Static task
static1
Behavioral task
behavioral1
Sample
3fd25f61b96cd8557f087a4bdb41161154940ed76ac320c8a8455e2b4898f6f7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3fd25f61b96cd8557f087a4bdb41161154940ed76ac320c8a8455e2b4898f6f7.exe
Resource
win10v2004-20220901-en
General
-
Target
3fd25f61b96cd8557f087a4bdb41161154940ed76ac320c8a8455e2b4898f6f7
-
Size
145KB
-
MD5
d887dbc13ba3c83ce90d50d0319904d0
-
SHA1
973cd2e65a1283451cb8c149f834d0d51c182975
-
SHA256
3fd25f61b96cd8557f087a4bdb41161154940ed76ac320c8a8455e2b4898f6f7
-
SHA512
9221cde728ab597e5da1c654bfe319273991c55b5c2940e823b328a1225efaf4186c49ffa8f46d4e0dcc1e74d82cf326ec44b95f7d7811ce0532e4d88b3cb616
-
SSDEEP
3072:JZFPw8Du42FQ6pi96GV4xBWR0odkEadv/S4xS9VUQof1Y/:JZF3DsFQ6pi9exB0dk7/xiVh
Malware Config
Signatures
Files
-
3fd25f61b96cd8557f087a4bdb41161154940ed76ac320c8a8455e2b4898f6f7.exe windows x86
3e49a3b064ab6b62aa932288f1523cbb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strncpy
memcpy
_CIsinh
_CIatan
_CIlog10
floor
ceil
_CIpow
_CIlog
_CIacos
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
user32
CallWindowProcA
wsock32
closesocket
WSACleanup
WSAStartup
winmm
mciSendCommandA
Sections
.code Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ta Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
src Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ