Static task
static1
Behavioral task
behavioral1
Sample
f3f11d8a1a906adb312f0acbf762c6373546c8f4d15d95afb07c8a55b2e7d6b9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f3f11d8a1a906adb312f0acbf762c6373546c8f4d15d95afb07c8a55b2e7d6b9.exe
Resource
win10v2004-20221111-en
General
-
Target
f3f11d8a1a906adb312f0acbf762c6373546c8f4d15d95afb07c8a55b2e7d6b9
-
Size
149KB
-
MD5
2d65716cfb34d436f3b50dabb94dc100
-
SHA1
3832937fa79814e06d0b5cd32c4131d50f327acc
-
SHA256
f3f11d8a1a906adb312f0acbf762c6373546c8f4d15d95afb07c8a55b2e7d6b9
-
SHA512
4c246e01127e25aec60eddfe99dd1c9f4b16972a98741d1b6b7b5cc451f1c693c3a18b0c29dbe9334bb59bbb94383f3f9d5b65218bbee12932614019d6c92edb
-
SSDEEP
3072:9Fb8/4PXFZXkUjnrn7d5Hm8L05FEYRBalXYoTmNp1jZtQFyc+r48zB:9FwAdZUwr7d5GssFjBamEmBZKO88z
Malware Config
Signatures
Files
-
f3f11d8a1a906adb312f0acbf762c6373546c8f4d15d95afb07c8a55b2e7d6b9.exe windows x86
ca02fc1fbbbf0539a105fa1eba4026d8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__getmainargs
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
fclose
srand
rand
fprintf
fopen
_snprintf
malloc
feof
sprintf
__set_app_type
fscanf
memset
wininet
InternetReadFile
InternetOpenUrlA
DeleteUrlCacheEntry
InternetOpenA
InternetCloseHandle
kernel32
ReadFile
Sleep
WriteFile
GetTickCount
lstrlenA
SetFilePointer
GetFileSize
CreateFileA
CloseHandle
GetTempPathA
GetSystemTime
GetModuleHandleA
GetStartupInfoA
CreateProcessA
user32
MessageBoxA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ