Static task
static1
Behavioral task
behavioral1
Sample
96ddad541bac4cf73e4c28ef7e5aa3c6366ac58bcc214aadbe2b1f1eb502623b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
96ddad541bac4cf73e4c28ef7e5aa3c6366ac58bcc214aadbe2b1f1eb502623b.exe
Resource
win10v2004-20221111-en
General
-
Target
96ddad541bac4cf73e4c28ef7e5aa3c6366ac58bcc214aadbe2b1f1eb502623b
-
Size
140KB
-
MD5
2c33a233521153b4f8fa410406acc1cf
-
SHA1
0712fcbadab826e35c6c0658c9cece9cfcbb7f1c
-
SHA256
96ddad541bac4cf73e4c28ef7e5aa3c6366ac58bcc214aadbe2b1f1eb502623b
-
SHA512
c34a7700ab93703cd3287524ff16344234ba069e8090f839e30961dcb2b5356a946d11ce4f277455087ad7212975175a0a23b76d6924bc87f96330b33bc0a810
-
SSDEEP
1536:FxDCvMf+qnvU5a+2VLRBI23NJVAe+ImQrGPLaW6bKAeFMONnh/xD81nl2fGcfaLM:FxDCHqnvU5xa+2dgwmQrG2T2hGz2di
Malware Config
Signatures
Files
-
96ddad541bac4cf73e4c28ef7e5aa3c6366ac58bcc214aadbe2b1f1eb502623b.exe windows x86
0ae8998602067a4592ebf837cc8bd574
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
mbstowcs
_strlwr
malloc
strchr
sprintf
strcat
wcstombs
isdigit
memset
__CxxFrameHandler
atoi
toupper
srand
time
rand
??2@YAPAXI@Z
??3@YAXPAX@Z
strlen
calloc
free
_itoa
_EH_prolog
memcpy
kernel32
FreeLibrary
LoadLibraryA
Sleep
GetModuleHandleA
GetTickCount
GetLastError
LockResource
FindClose
FindFirstFileA
CreateDirectoryA
GetWindowsDirectoryA
CloseHandle
GetCurrentProcess
MoveFileExA
UnmapViewOfFile
CreateFileA
GlobalAlloc
GlobalFree
GetModuleFileNameA
GetShortPathNameA
GetEnvironmentVariableA
lstrcatA
GetCurrentThread
ResumeThread
GetVersionExA
lstrcmpiA
lstrlenA
lstrcpyA
GetFileAttributesA
OpenFileMappingA
MapViewOfFile
GetProcAddress
user32
wsprintfA
mfc42
ord537
ord665
ord1979
ord3318
ord5186
ord354
ord535
ord2818
ord540
ord2393
ord1567
ord268
ord800
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE