Static task
static1
Behavioral task
behavioral1
Sample
b971f98765e2ef41c89b2cf3a15e9ccb7d7cf68a1bc560629ecc0771c5a48a18.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b971f98765e2ef41c89b2cf3a15e9ccb7d7cf68a1bc560629ecc0771c5a48a18.exe
Resource
win10v2004-20220901-en
General
-
Target
b971f98765e2ef41c89b2cf3a15e9ccb7d7cf68a1bc560629ecc0771c5a48a18
-
Size
165KB
-
MD5
81fd42a8f9429ae57addcec944cc0b58
-
SHA1
3dc0b6f36b1fd7572280d7797c7b787e544275f7
-
SHA256
b971f98765e2ef41c89b2cf3a15e9ccb7d7cf68a1bc560629ecc0771c5a48a18
-
SHA512
1f2f017d8c44cf3fbbdb620bb1d3eaf9a3c4bf4e6e90081c5d8581421ec416ba1c2b3b6df50d27c8ed4c68e09283a6acedf301420f00cba78b414c1e76c822db
-
SSDEEP
3072:GJWurz3uhFxi2Gjc9UzPJPnXeVhJ6bF/M/5gdSC5apVyctuuJ9+QSXM:GJWez3ur4jcmzBOV7eyy8CWVhrr4c
Malware Config
Signatures
Files
-
b971f98765e2ef41c89b2cf3a15e9ccb7d7cf68a1bc560629ecc0771c5a48a18.exe windows x86
914e7f652ec515668fc17e5cb55c26a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
vsprintf
strcpy
strcat
strncat
_except_handler3
rand
putchar
_access
free
mbstowcs
wcslen
wcstombs
atoi
wcscpy
_beginthreadex
_CxxThrowException
??1type_info@@UAE@XZ
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
exit
fopen
fwrite
fclose
strcmp
malloc
strrchr
memcmp
??2@YAPAXI@Z
memset
__CxxFrameHandler
strlen
_ftol
memmove
calloc
??3@YAXPAX@Z
kernel32
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WinExec
SetEvent
Sleep
LoadLibraryA
GetProcAddress
GetLastError
Sections
.www Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.qqq Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wwww Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
vvvv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
mian Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
www Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ