Static task
static1
Behavioral task
behavioral1
Sample
396da4eb1a0ca68c8271c7b8da9b119d18892d4713abb49bfa4463f9e5f75271.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
396da4eb1a0ca68c8271c7b8da9b119d18892d4713abb49bfa4463f9e5f75271.exe
Resource
win10v2004-20220812-en
General
-
Target
396da4eb1a0ca68c8271c7b8da9b119d18892d4713abb49bfa4463f9e5f75271
-
Size
95KB
-
MD5
0ad5e92e7c546c0e6c9313b278f4922d
-
SHA1
4b3e315720f6dc05813346af3a7afd52100e0b05
-
SHA256
396da4eb1a0ca68c8271c7b8da9b119d18892d4713abb49bfa4463f9e5f75271
-
SHA512
4cfcb3a0e4ecffa831718c4dac9202a8b37f8fc9aa353fc88742c12cf15750ad69bd1f37f9e675f128d714f91f1fb57a9290c24c3e807bd179c90f92cec6e478
-
SSDEEP
1536:s1Hg5NkvecXcJvtGTshszWn+KYR5YbISeAcWD7T/ZoptSMiR7D2XatUQaaX:zmecXYvt1aT2De07T/ZUSMiR7D6Zs
Malware Config
Signatures
Files
-
396da4eb1a0ca68c8271c7b8da9b119d18892d4713abb49bfa4463f9e5f75271.exe windows x86
c8da865504d4b835014ec2433c90f088
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharUpperBuffA
kernel32
SetFileTime
DeviceIoControl
GetProcAddress
GetLastError
FindClose
GetModuleHandleA
GetFileAttributesA
FindFirstFileA
GetSystemTime
SystemTimeToFileTime
FindNextFileA
GetFileTime
SetEndOfFile
SetFilePointer
CreateFileA
CloseHandle
ReadFile
WriteFile
GetFileSize
SleepEx
ReadFileEx
WriteFileEx
msvcr71
_makepath
_getch
exit
atol
free
malloc
_splitpath
toupper
puts
memset
printf
strchr
strtok
_errno
_snprintf
sprintf
strncat
strrchr
strpbrk
_c_exit
_exit
_XcptFilter
_cexit
__p___initenv
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
_stat
_stricmp
_unlink
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE