Static task
static1
Behavioral task
behavioral1
Sample
c89ece021dcadd309bb326c4dff514eadd598e1a63799c2f04a6ec755176e93a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c89ece021dcadd309bb326c4dff514eadd598e1a63799c2f04a6ec755176e93a.exe
Resource
win10v2004-20220812-en
General
-
Target
c89ece021dcadd309bb326c4dff514eadd598e1a63799c2f04a6ec755176e93a
-
Size
139KB
-
MD5
2fd1a656b35d21d08f2049fa35751c9c
-
SHA1
cd2019c37a4de998669cedf59346f7295dee4808
-
SHA256
c89ece021dcadd309bb326c4dff514eadd598e1a63799c2f04a6ec755176e93a
-
SHA512
1f167932ac2ce34c7c55a40775ed5cd3e01a1608a4ad9852550101eee9273b83181c40eedced9e61e0c023f4a974e2462ffdd6fe5f88d56d2600f923cd31a881
-
SSDEEP
3072:7WW77/W9cs7ymJbhznrJmpeU0qV5k2LUiaktjR7:r/W+SymJbhp5lmUAt
Malware Config
Signatures
Files
-
c89ece021dcadd309bb326c4dff514eadd598e1a63799c2f04a6ec755176e93a.exe windows x86
15fad104f0a9330e6e530c467792f974
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit
_c_exit
_chmod
strncpy
strncat
system
strrchr
_stat
_open
_errno
_sys_errlist
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_fstat
_close
_snprintf
_mkdir
exit
_write
_read
_adjust_fdiv
strchr
__setusermatherr
_lseek
kernel32
Sleep
LocalFree
GetLastError
GetFileAttributesA
FindClose
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FindFirstFileA
FindNextFileA
FormatMessageA
user32
CharToOemBuffA
IsCharAlphaNumericA
ws2_32
closesocket
recv
setsockopt
WSAStartup
send
mswsock
s_perror
rcmd
advapi32
GetUserNameA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 27KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE