Static task
static1
Behavioral task
behavioral1
Sample
645eabb2bfbc5a31b1bedc93fc8c9b6c285d77850c9c5874d681c611828935c7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
645eabb2bfbc5a31b1bedc93fc8c9b6c285d77850c9c5874d681c611828935c7.exe
Resource
win10v2004-20220812-en
General
-
Target
645eabb2bfbc5a31b1bedc93fc8c9b6c285d77850c9c5874d681c611828935c7
-
Size
64KB
-
MD5
fc6df78203b9052e46a83862c39f0220
-
SHA1
6ef88338eaa1f0dadcd2e70cb2cae1d2d79ae41c
-
SHA256
645eabb2bfbc5a31b1bedc93fc8c9b6c285d77850c9c5874d681c611828935c7
-
SHA512
0e9c837bb0863302259d08ec7ac48fabbdacdf236c7622adbd6e9d5eb132ff71c8dd61ecf177506eebff6132d9eb20fa1dcaacb6ed073e84d8308e94c978ba6f
-
SSDEEP
1536:TbYxPKDE5oi5eWtPtgCj7IkEl2hulG0g94H:TbYxUEnt1ge7IkEkMPVH
Malware Config
Signatures
Files
-
645eabb2bfbc5a31b1bedc93fc8c9b6c285d77850c9c5874d681c611828935c7.exe windows x86
ebbdfe57b45aa24b39a87ddc77f3c18a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
sprintf
_snprintf
memcpy
srand
_snwprintf
wcscpy
rand
printf
memset
atoi
strcpy
strlen
free
malloc
fopen
fclose
strcmp
__p__commode
strstr
kernel32
SetErrorMode
DeleteFileW
GetModuleFileNameW
GetCommandLineW
TerminateProcess
FindResourceA
SizeofResource
LoadResource
LockResource
GetTickCount
MultiByteToWideChar
CreateFileW
WriteFile
CloseHandle
SetLastError
GetProcAddress
GetModuleHandleA
Sleep
GetStartupInfoA
ws2_32
send
user32
MessageBoxA
shell32
SHGetSpecialFolderPathW
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE