Static task
static1
Behavioral task
behavioral1
Sample
b9a066136386389deeb14c4bd871224c1ca5a15367c94509e5646590d583362c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b9a066136386389deeb14c4bd871224c1ca5a15367c94509e5646590d583362c.exe
Resource
win10v2004-20221111-en
General
-
Target
b9a066136386389deeb14c4bd871224c1ca5a15367c94509e5646590d583362c
-
Size
220KB
-
MD5
271d6e36849b83045eb34fd91bf89345
-
SHA1
4093856cd2b2d441fb3b015d0ec880bc498ae17b
-
SHA256
b9a066136386389deeb14c4bd871224c1ca5a15367c94509e5646590d583362c
-
SHA512
3af5054a01d88a1350cb6ec86e2906e2e36fa3595ca5ec68e7daaec0feb5e0177e5b4ef9285641d5eb50aed3ecbb8291789db30e49da27b9311f1980b3e822ce
-
SSDEEP
3072:kcn7oKbC5r5+PcUUq5t5f65fIq5Zq5t5foA5PYwkWwHcXPVsZi/Nen1joq/C0:ZepwrYFqrjxqHI/E1/1
Malware Config
Signatures
Files
-
b9a066136386389deeb14c4bd871224c1ca5a15367c94509e5646590d583362c.exe windows x86
e57ffccfe3fadca12917636514e3878d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcp60
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
msvcrt
rand
srand
time
free
exit
_rotl
memcpy
fread
fclose
??2@YAPAXI@Z
fopen
strcat
_snprintf
atol
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
printf
strlen
malloc
strcpy
__dllonexit
kernel32
CreateProcessA
GetStartupInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 308B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
onrueug Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE