Static task
static1
Behavioral task
behavioral1
Sample
sample.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
sample.exe
Resource
win10v2004-20220812-en
General
-
Target
54c97f54302a406059e26a044db4d28017f76ecad75a04fa30c1c34cd76d080c
-
Size
13KB
-
MD5
5bf2ec7cf39bae4db915a4f708870d58
-
SHA1
27328e0e8bf9e06861151af7c02128e01a1367fc
-
SHA256
54c97f54302a406059e26a044db4d28017f76ecad75a04fa30c1c34cd76d080c
-
SHA512
24b713639ed605b5ba2aeca62d183055c891e78707f4112df7afcfa849627e8f24ad06d26a12beff8dca58c3d0fd9d0323ab66fa4cdc4ea7992ca2a2d52032d4
-
SSDEEP
192:fjnC7EFAFYswhu+5O62RazcW6f135//RV/Z3lAqAgaaXzjoQP2IA3n:fb6YAKhutnazdk373OqANaXzw5n
Malware Config
Signatures
Files
-
54c97f54302a406059e26a044db4d28017f76ecad75a04fa30c1c34cd76d080c.bz2
-
sample.exe windows x86
b573c4cf538c2006d3d78fdd7d528d17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
kernel32
AddAtomA
CloseHandle
CopyFileA
CreateFileA
CreateMutexA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetDriveTypeA
GetFileSize
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetSystemTime
ReadFile
SetFileAttributesA
SetFilePointer
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject
WriteFile
lstrlenA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
free
fwrite
getenv
isalpha
islower
isupper
malloc
signal
sprintf
strchr
strcmp
strcpy
shell32
ShellExecuteA
user32
FindWindowA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE