Static task
static1
Behavioral task
behavioral1
Sample
96e4dd9356c9626f61e07f807418602eb8cd35b250889b3bb04701317044570c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
96e4dd9356c9626f61e07f807418602eb8cd35b250889b3bb04701317044570c.exe
Resource
win10v2004-20220812-en
General
-
Target
96e4dd9356c9626f61e07f807418602eb8cd35b250889b3bb04701317044570c
-
Size
16KB
-
MD5
cc03f40b9c2b801014049416cb403a3a
-
SHA1
e3dd8c757572b5981db25a1ef9b5d5b427840e24
-
SHA256
96e4dd9356c9626f61e07f807418602eb8cd35b250889b3bb04701317044570c
-
SHA512
a58b16bc93eb14fb7d0cc50538171e89cdb7dd50489d1e1949bb557892bef5e63c7d642273a69fee4bedba6798c850afe0b60dc2a3222ec765dc528ec12abbe2
-
SSDEEP
384:gEH5+9qxbjSeUQ8UlGsyBhUYr6pWB615ub8XkcxD4:gEHdcO8UlG9dB8wMD4
Malware Config
Signatures
Files
-
96e4dd9356c9626f61e07f807418602eb8cd35b250889b3bb04701317044570c.exe windows x86
5ccfcb83f7fe93e7ecc495b6e83d97b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
CreateThread
InterlockedExchange
GetLastError
CreateMutexA
GetStartupInfoA
CreateProcessA
GetModuleHandleA
GetCurrentProcess
CloseHandle
lstrcpyA
GetSystemDefaultUILanguage
FreeLibrary
GlobalAlloc
GlobalFree
GetCurrentProcessId
GetTickCount
GetProcAddress
Sleep
LoadLibraryA
user32
ExitWindowsEx
wsprintfA
advapi32
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
msvcrt
__setusermatherr
_controlfp
rand
srand
memcpy
memset
strlen
sprintf
strncpy
strcspn
strstr
strcpy
strcat
??2@YAPAXI@Z
atoi
__CxxFrameHandler
_CxxThrowException
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
ws2_32
sendto
htons
setsockopt
WSAStartup
closesocket
socket
WSASocketA
connect
WSAIoctl
shutdown
recv
__WSAFDIsSet
send
inet_addr
wininet
InternetReadFile
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE