Static task
static1
Behavioral task
behavioral1
Sample
f862f5e3474b77e5e255aad9320b7b1c4d5f2f13f5d8ddfc5b3b211beddf75da.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f862f5e3474b77e5e255aad9320b7b1c4d5f2f13f5d8ddfc5b3b211beddf75da.exe
Resource
win10v2004-20220812-en
General
-
Target
f862f5e3474b77e5e255aad9320b7b1c4d5f2f13f5d8ddfc5b3b211beddf75da
-
Size
151KB
-
MD5
42994015a336a1d704bce0dd0fcebe40
-
SHA1
664393fbda3dd9ba1dee22bf9e9f783dd407fb1c
-
SHA256
f862f5e3474b77e5e255aad9320b7b1c4d5f2f13f5d8ddfc5b3b211beddf75da
-
SHA512
8f33d6625128ab7d8744c0e10e6dc7d93dc580b9eb32c3c4bbea872eebc0d890ee6277044f6282f763e05016b180bd2f9d717f6e6a4083c388ecf7f100853c2c
-
SSDEEP
3072:KukKWBQpZPJE2KawoZiLSUbrpdEbcowle:KukPBsYcLUbFdEbcov
Malware Config
Signatures
Files
-
f862f5e3474b77e5e255aad9320b7b1c4d5f2f13f5d8ddfc5b3b211beddf75da.exe windows x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ