Static task
static1
Behavioral task
behavioral1
Sample
c12b595522f0fcd2d6fce7cefa481d77780e84be138d927bccf4b10c9d45e11d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c12b595522f0fcd2d6fce7cefa481d77780e84be138d927bccf4b10c9d45e11d.exe
Resource
win10v2004-20220812-en
General
-
Target
c12b595522f0fcd2d6fce7cefa481d77780e84be138d927bccf4b10c9d45e11d
-
Size
404KB
-
MD5
982eecdf1b0f8156010a28ff2200ba43
-
SHA1
242a57c03c8f212990a849195bce5dece219df88
-
SHA256
c12b595522f0fcd2d6fce7cefa481d77780e84be138d927bccf4b10c9d45e11d
-
SHA512
c9eb800333bc1b4f5566a019738040ac2bc63b8b79469b62e81270cb020310334b1156b48eb9426e36d26efad5b9556a216dc3555d7fc0481c317d3a5583ae71
-
SSDEEP
6144:1ckGtb/ckGtbcTKEWMefvmN9OZ2wuGSDVzofO9rkrw7sOe7KgZnbFsQaUWC2RJCl:qptbkptbYKTbmfhJzwQFK7KgZfr0q
Malware Config
Signatures
Files
-
c12b595522f0fcd2d6fce7cefa481d77780e84be138d927bccf4b10c9d45e11d.exe windows x86
f893ea79c125cbc772d436f36bce09f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetModuleHandleA
CreateThread
Sleep
user32
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
LoadCursorA
CreateWindowExA
RegisterClassExA
LoadIconA
MessageBoxA
DefWindowProcA
gdi32
CreateSolidBrush
ole32
CoInitialize
msvcp60
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
??0Init@ios_base@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
msvcrt
memmove
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strlen
wcslen
memset
memcpy
??2@YAPAXI@Z
sprintf
malloc
getenv
_stricmp
strcmp
__CxxFrameHandler
_EH_prolog
_except_handler3
__dllonexit
_onexit
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 382KB - Virtual size: 382KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ