Static task
static1
Behavioral task
behavioral1
Sample
9e2553095e158021bb60a15e9e592a4b5f005bff6129d367f9f89997276a7612.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9e2553095e158021bb60a15e9e592a4b5f005bff6129d367f9f89997276a7612.exe
Resource
win10v2004-20220812-en
General
-
Target
9e2553095e158021bb60a15e9e592a4b5f005bff6129d367f9f89997276a7612
-
Size
209KB
-
MD5
3b0abbfd037ff29f9788ba780a513e84
-
SHA1
f623f7167a2043276d459c9b2b48abc396567495
-
SHA256
9e2553095e158021bb60a15e9e592a4b5f005bff6129d367f9f89997276a7612
-
SHA512
929042d8f595578bbdc544e645873a1ccb684842c753b7314ff53adf8f4906a8f1a6ad309f4041f69861c99434a98d99cb2563a0542610d05df3d27fdf8a284c
-
SSDEEP
3072:gJWurz3uhFxi2Gqc9UzPJPnXeVhJ6bF/M/5gdS6c5apVyctuuJ9+QS0wf78eBX:gJWez3ur4qcmzBOV7eyy87WVhrr4rDX
Malware Config
Signatures
Files
-
9e2553095e158021bb60a15e9e592a4b5f005bff6129d367f9f89997276a7612.exe windows x86
914e7f652ec515668fc17e5cb55c26a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
vsprintf
strcpy
strcat
strncat
_except_handler3
rand
putchar
_access
free
mbstowcs
wcslen
wcstombs
atoi
wcscpy
_beginthreadex
_CxxThrowException
??1type_info@@UAE@XZ
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
exit
fopen
fwrite
fclose
strcmp
malloc
strrchr
memcmp
??2@YAPAXI@Z
memset
__CxxFrameHandler
strlen
_ftol
memmove
calloc
??3@YAXPAX@Z
kernel32
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WinExec
SetEvent
Sleep
LoadLibraryA
GetProcAddress
GetLastError
Sections
.www Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.qqq Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wwww Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
vvvv Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
mian Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
www Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ