Static task
static1
Behavioral task
behavioral1
Sample
440538422b9cd5fbae14c5d1479786d4bff48a907e0be4b5d6815760dae86011.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
440538422b9cd5fbae14c5d1479786d4bff48a907e0be4b5d6815760dae86011.exe
Resource
win10v2004-20220901-en
General
-
Target
440538422b9cd5fbae14c5d1479786d4bff48a907e0be4b5d6815760dae86011
-
Size
132KB
-
MD5
7aa5489ced40f172e49fa6b7454244f2
-
SHA1
7d6fe00ca8c83a87d78b8faa56e48df7b10a7cf8
-
SHA256
440538422b9cd5fbae14c5d1479786d4bff48a907e0be4b5d6815760dae86011
-
SHA512
503db5b410310a00b0301293761f650c3622eab06dc039f057701959d28a7f6e09584e7e62710e590bbf8da3e9ac7eaf883c0ad6a80ce4e1374ba7adbae6d60d
-
SSDEEP
3072:lxo/1bTeZ8Xl9VdHaxeNfYjl62/skZhnAnxag:Q1bTeKXl9L6KfYj45aZuwg
Malware Config
Signatures
Files
-
440538422b9cd5fbae14c5d1479786d4bff48a907e0be4b5d6815760dae86011.exe windows x86
f77abb8c8e5d5a2e62424631b1adddbd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CreateThread
Sleep
GetStartupInfoA
lstrlenA
user32
SetTimer
PostQuitMessage
EndPaint
BeginPaint
DestroyWindow
wsprintfA
FillRect
GetClientRect
MessageBoxA
LoadCursorA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
DefWindowProcA
LoadIconA
RegisterClassExA
gdi32
SetBkMode
CreateSolidBrush
SelectObject
CreateCompatibleDC
TextOutA
SetTextColor
ole32
CoInitialize
msvcp60
??1_Winit@std@@QAE@XZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_F?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0_Winit@std@@QAE@XZ
msvcrt
sprintf
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
_onexit
__dllonexit
free
_except_handler3
_EH_prolog
__CxxFrameHandler
memcpy
memset
strlen
??2@YAPAXI@Z
getenv
_stricmp
malloc
memmove
strcmp
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE