Static task
static1
Behavioral task
behavioral1
Sample
33b66f540bc2d1e081951ab06b7ffe520f270cfc37118f0c32b4596f5635f8dc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
33b66f540bc2d1e081951ab06b7ffe520f270cfc37118f0c32b4596f5635f8dc.exe
Resource
win10v2004-20220812-en
General
-
Target
33b66f540bc2d1e081951ab06b7ffe520f270cfc37118f0c32b4596f5635f8dc
-
Size
152KB
-
MD5
12091b28287fbafd977157966311df00
-
SHA1
11dbcc8bdc4a7372fcd34b2e3e9459190704211b
-
SHA256
33b66f540bc2d1e081951ab06b7ffe520f270cfc37118f0c32b4596f5635f8dc
-
SHA512
73fef38b153ff6f41884fb0d13b3b95f1c342e07c99031dd7f79584142f965792bac47e1f27d296460c23d4d0dd74df4ea3c8652fa14a6acb377b45fbc544391
-
SSDEEP
3072:bL3pVyGSV8i/AR8n0h7n9MXexhn5V7Bs/cJ1:fpVyGUAFTjks1
Malware Config
Signatures
Files
-
33b66f540bc2d1e081951ab06b7ffe520f270cfc37118f0c32b4596f5635f8dc.exe windows x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ