Static task
static1
Behavioral task
behavioral1
Sample
dd231809d1e0b7b1ce2cd821f4e8fdf75519256af6fc460488efe0c1100e4688.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dd231809d1e0b7b1ce2cd821f4e8fdf75519256af6fc460488efe0c1100e4688.exe
Resource
win10v2004-20220812-en
General
-
Target
dd231809d1e0b7b1ce2cd821f4e8fdf75519256af6fc460488efe0c1100e4688
-
Size
132KB
-
MD5
d59f887c6d0721ad2d80ad7bac960767
-
SHA1
613a2f95840cc1a45b954996c88cd63aaffc4cfa
-
SHA256
dd231809d1e0b7b1ce2cd821f4e8fdf75519256af6fc460488efe0c1100e4688
-
SHA512
481efc2153d9742a18edf5c3afee4f1f368e363b0e40679bae5c6baef8d6f9043f06b1146f5862498c3dd02b75ff4f8dbdbf74d2c86d9721db9d1637629057cd
-
SSDEEP
3072:iYtWdbDGqQlJhAc7MMejEhlN6gCJ1ZNzp7+Xz:iYtWdbajJSUtzN6p1LzwX
Malware Config
Signatures
Files
-
dd231809d1e0b7b1ce2cd821f4e8fdf75519256af6fc460488efe0c1100e4688.exe windows x86
cab48b9f1a24258d70b0eb3d2f765f50
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strcpy
strncat
strcat
_except_handler3
rand
putchar
_access
free
mbstowcs
wcslen
wcstombs
atoi
wcscpy
_beginthreadex
vsprintf
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
exit
fopen
fwrite
fclose
strcmp
malloc
strrchr
memcmp
??2@YAPAXI@Z
memset
__CxxFrameHandler
strlen
_ftol
memmove
calloc
??3@YAXPAX@Z
kernel32
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetModuleHandleA
lstrlenA
MultiByteToWideChar
WinExec
SetEvent
Sleep
LoadLibraryA
GetProcAddress
GetLastError
Sections
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PAGE Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
mian Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
cccc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ