Static task
static1
Behavioral task
behavioral1
Sample
33915670805c24a67635bdb992ee1bf55900d5ae6fcd000316b88b7bbb89f436.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
33915670805c24a67635bdb992ee1bf55900d5ae6fcd000316b88b7bbb89f436.exe
Resource
win10v2004-20220812-en
General
-
Target
33915670805c24a67635bdb992ee1bf55900d5ae6fcd000316b88b7bbb89f436
-
Size
37KB
-
MD5
70d46dbc7a9e20aa611a79b5af3da352
-
SHA1
fd0a844c4601e1af060e669ad8f55d00d807b5c9
-
SHA256
33915670805c24a67635bdb992ee1bf55900d5ae6fcd000316b88b7bbb89f436
-
SHA512
ecd5216d6e03e9faa3b8dfda43d572fddad4951366489eea08eb96018101f6351a9e4b9dfc178f120ba58e6ee58e99cbf769ffd88a8d34f565b71b8a5b32fd6e
-
SSDEEP
768:gKc5566mMs/TfJ1sePIFnToIf1MW8+3e3Zy:ijVg/ruFnToIfr53eE
Malware Config
Signatures
Files
-
33915670805c24a67635bdb992ee1bf55900d5ae6fcd000316b88b7bbb89f436.exe windows x86
94d3c344ce31c8e290ee42a57420e0bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringA
lstrcpynA
lstrcpyA
WaitForSingleObject
GlobalMemoryStatus
GetModuleHandleA
FreeLibrary
GetStartupInfoA
CloseHandle
ExitThread
GetProcAddress
WinExec
GetCurrentProcess
MoveFileA
CopyFileA
DeleteFileA
Sleep
CreateThread
GetTickCount
LoadLibraryA
user32
wsprintfA
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
rand
strcpy
memcpy
memset
printf
srand
time
strncpy
strcspn
strlen
strstr
strcat
atoi
sprintf
strchr
??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
_except_handler3
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
ws2_32
sendto
inet_addr
htons
setsockopt
WSASocketA
WSAStartup
closesocket
send
connect
socket
shutdown
gethostbyname
inet_ntoa
htonl
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ