Static task
static1
Behavioral task
behavioral1
Sample
930fd696de51768bfd3561670e4c3bfef116acdaef812f739cdfaf87e1d866d7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
930fd696de51768bfd3561670e4c3bfef116acdaef812f739cdfaf87e1d866d7.exe
Resource
win10v2004-20220901-en
General
-
Target
930fd696de51768bfd3561670e4c3bfef116acdaef812f739cdfaf87e1d866d7
-
Size
151KB
-
MD5
0ffdc1b2f4f7f99387d24adabfdef819
-
SHA1
2bc52e441da8d6a10503488d7ce018c5fa918929
-
SHA256
930fd696de51768bfd3561670e4c3bfef116acdaef812f739cdfaf87e1d866d7
-
SHA512
203254d0d47fd9f6d7759eca61a61d7adb3251db60ec06d8fd3cdd2370bb4da99e1cf7ab4ba35ac539c438ce56af8e529e85c90195d5493494ac8a9860ecbc71
-
SSDEEP
3072:oZKEwvc3eEVjQmMLfuiWV+FrdcQpcw/Aem1iVzm:oZKEwvc3eERoUYrdVcSAepzm
Malware Config
Signatures
Files
-
930fd696de51768bfd3561670e4c3bfef116acdaef812f739cdfaf87e1d866d7.exe windows x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ