Static task
static1
Behavioral task
behavioral1
Sample
75767f4e2be3b15cb9b034830cd9925ef924c6aa4f51e875de783e229013c7e3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
75767f4e2be3b15cb9b034830cd9925ef924c6aa4f51e875de783e229013c7e3.exe
Resource
win10v2004-20221111-en
General
-
Target
75767f4e2be3b15cb9b034830cd9925ef924c6aa4f51e875de783e229013c7e3
-
Size
748KB
-
MD5
c9ed44dad9f3e8038106b32beae07192
-
SHA1
0217815760a3e5cc20445a688e0efc4bac48a08c
-
SHA256
75767f4e2be3b15cb9b034830cd9925ef924c6aa4f51e875de783e229013c7e3
-
SHA512
29cd7a9bc62d52120535e50655638ab3e210f9ff028665359e6318d0af72244a2a7d4829d3f0f6fbd5d188c1d741e60d04c18b0f7f90495b7f69e2afc4a6259b
-
SSDEEP
12288:mVJqXVJqLVJqmVJqwVJqhVJq1VJqUVJq0VJqEB3JLD+2ZCO:WDEO
Malware Config
Signatures
Files
-
75767f4e2be3b15cb9b034830cd9925ef924c6aa4f51e875de783e229013c7e3.exe windows x86
f7c5cb7d3be0b2cc0b9c48f91b1670b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
strncpy
_initterm
_adjust_fdiv
atoi
strrchr
strstr
free
malloc
sprintf
strncat
_strlwr
strcmp
rand
strcat
strchr
memcpy
strtok
strlen
strcpy
memset
kernel32
LocalAlloc
GetFileSize
CreateThread
ReleaseMutex
HeapCreate
GetLastError
WritePrivateProfileStringA
ExitProcess
GetSystemTime
HeapDestroy
GetProcAddress
GetVersionExA
LoadLibraryA
GetCurrentThreadId
CloseHandle
WriteFile
SetFilePointer
CreateFileA
MoveFileExA
ReadFile
SetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
WriteProcessMemory
OpenProcess
GetCurrentProcessId
lstrcmpiA
HeapCompact
Sleep
GetTickCount
SetThreadPriority
GetCurrentThread
CreateMutexA
lstrcpyA
GetComputerNameA
LocalFree
lstrlenA
LoadResource
LockResource
GetModuleHandleA
WaitForSingleObject
GetDriveTypeA
GetLogicalDrives
FreeLibrary
CopyFileA
GetFileAttributesA
SetFileTime
GetFileTime
EndUpdateResourceA
UpdateResourceA
SizeofResource
GetWindowsDirectoryA
GetTempFileNameA
FindResourceA
CreateProcessA
BeginUpdateResourceA
LoadLibraryExA
DeleteFileA
GetTempPathA
GetModuleFileNameA
GetCurrentDirectoryA
GetCommandLineA
GetSystemDirectoryA
advapi32
RegDeleteKeyA
RegQueryValueA
RegSetValueExA
RegEnumValueA
RegCloseKey
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 700KB - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE