Static task
static1
Behavioral task
behavioral1
Sample
9428675642cff52e67f5971ac38db1cfcb54ce12b8a6c28c4dd8e0228332c9fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9428675642cff52e67f5971ac38db1cfcb54ce12b8a6c28c4dd8e0228332c9fb.exe
Resource
win10v2004-20220812-en
General
-
Target
9428675642cff52e67f5971ac38db1cfcb54ce12b8a6c28c4dd8e0228332c9fb
-
Size
49KB
-
MD5
210561b5f2b54b787fc53cc27029f828
-
SHA1
7e1f728142ba7edbde1f32d4e21f7562119e2f21
-
SHA256
9428675642cff52e67f5971ac38db1cfcb54ce12b8a6c28c4dd8e0228332c9fb
-
SHA512
620c073766638cd3c7ac3c76d5c69f258d465258f902ce6409ec2ccf979558b0cbb2a23b725f6e6651f3bff053c4a0e0300dbea4e600cdf5c287bbff36441950
-
SSDEEP
1536:EHcsfW3p+VrESylJg4zFgT8ZWBXxRfbJ:8tu3kgg4zFgTNBhRzJ
Malware Config
Signatures
Files
-
9428675642cff52e67f5971ac38db1cfcb54ce12b8a6c28c4dd8e0228332c9fb.exe windows x86
65551dfea3a62d0a71c3269e86dee980
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
free
_strnicmp
_iob
__p__fmode
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
atoi
_adjust_fdiv
__p__commode
realloc
_controlfp
??3@YAXPAX@Z
_except_handler3
exit
kernel32
ExitThread
CreateFileA
GetFileType
GetCurrentThread
ResetEvent
FindNextFileW
CompareStringW
GetCommandLineW
ExitProcess
MapViewOfFile
GetOEMCP
MultiByteToWideChar
lstrlenW
InterlockedIncrement
lstrcatA
GetStringTypeW
GlobalReAlloc
GetStdHandle
ulib
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z
??1DSTRING@@UAE@XZ
?Initialize@CLASS_DESCRIPTOR@@QAEEXZ
??0PROGRAM@@IAE@XZ
??0PATH@@QAE@XZ
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Initialize@PATH_ARGUMENT@@QAEEPADE@Z
?Compare@OBJECT@@UBEJPBV1@@Z
?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ
??0LONG_ARGUMENT@@QAE@XZ
?Strcat@WSTRING@@QAEEPBV1@@Z
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ