Static task
static1
Behavioral task
behavioral1
Sample
1d8dd5eba5a5f50b3384d98466c5bcbf7b0a403495df28c23a6ca4afbd5b02ea.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1d8dd5eba5a5f50b3384d98466c5bcbf7b0a403495df28c23a6ca4afbd5b02ea.exe
Resource
win10v2004-20221111-en
General
-
Target
1d8dd5eba5a5f50b3384d98466c5bcbf7b0a403495df28c23a6ca4afbd5b02ea
-
Size
55KB
-
MD5
f9d05a0b913ad1fa3dba3815fac3c7d5
-
SHA1
a17a833089bc1a4454e87730cc89c341181de187
-
SHA256
1d8dd5eba5a5f50b3384d98466c5bcbf7b0a403495df28c23a6ca4afbd5b02ea
-
SHA512
a5f5952661c367decb209aa5771a57a2899a1dad553a9a803f73cbe76a3466035d2265b173041d03d31be0d03155d734abc530bfac27466927e6c68e016a9b30
-
SSDEEP
768:p0exOmhCHPnOtEA18wd/r5Zqu6jBVYi/gRM/AjD2:FIOtEi55egqUD
Malware Config
Signatures
Files
-
1d8dd5eba5a5f50b3384d98466c5bcbf7b0a403495df28c23a6ca4afbd5b02ea.exe windows x86
39bf74ae1fa677a5086f042e65a484be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strchr
isdigit
isalpha
sscanf
_strnicmp
_strcmpi
rand
srand
exit
_stricmp
__p___argv
__p___argc
strncmp
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_beginthreadex
_endthreadex
??3@YAXPAX@Z
_strdup
strtok
strstr
atoi
??2@YAPAXI@Z
strncpy
__dllonexit
free
kernel32
GetModuleHandleA
CreateMutexA
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcpynA
CloseHandle
GetStartupInfoA
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 35KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE