Static task
static1
Behavioral task
behavioral1
Sample
96d716efd0852bdded6b4de463b3caec03b2c3dbf028c6413722eaefc42942b4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
96d716efd0852bdded6b4de463b3caec03b2c3dbf028c6413722eaefc42942b4.exe
Resource
win10v2004-20220901-en
General
-
Target
96d716efd0852bdded6b4de463b3caec03b2c3dbf028c6413722eaefc42942b4
-
Size
259KB
-
MD5
c2633b59ef7db0c559d4bd246763e322
-
SHA1
2140eee19569ce9daa24f88f9dbd12847e659fee
-
SHA256
96d716efd0852bdded6b4de463b3caec03b2c3dbf028c6413722eaefc42942b4
-
SHA512
c2bae1da2c2af668f1924da136efbbfe7da806d60f6c63c494b51234b7afb95f1f290ca32a5132d75f852678e3e50d5bada9e0a92a1323363fa260d7ae67ced5
-
SSDEEP
6144:NhRRPKyEFZD2ZbSEdLzvdu0R6F2bf/POXOH/y0x:ZhKyEn2QE5FrR6EL/PkOH3
Malware Config
Signatures
Files
-
96d716efd0852bdded6b4de463b3caec03b2c3dbf028c6413722eaefc42942b4.exe windows x86
d51bdfb863e0d8905d08dc6c2917ef0d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
HeapDestroy
GlobalFree
LocalFree
LocalAlloc
HeapCreate
GetStringTypeA
GetProcAddress
GetStartupInfoW
GetThreadLocale
GetVolumeInformationW
CreateFileA
LCMapStringA
GetACP
DeviceIoControl
GetTimeFormatW
CloseHandle
GetFileSize
GetStringTypeW
ExitProcess
RtlUnwind
msvcrt
_XcptFilter
time
strncmp
__set_app_type
_adjust_fdiv
__initenv
fopen
_initterm
memmove
_wcsicmp
??2@YAPAXI@Z
_acmdln
toupper
free
printf
realloc
_errno
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
__p__fmode
strchr
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ