Static task
static1
Behavioral task
behavioral1
Sample
749050e0e9dae7b409bbfc8562baf0dc151a11c883b21e319d4c5c0120a1e635.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
749050e0e9dae7b409bbfc8562baf0dc151a11c883b21e319d4c5c0120a1e635.exe
Resource
win10v2004-20221111-en
General
-
Target
749050e0e9dae7b409bbfc8562baf0dc151a11c883b21e319d4c5c0120a1e635
-
Size
145KB
-
MD5
222f2399fac044571ec4d219d571c2d0
-
SHA1
8fe715a22c04baf163a1689d79ad0e67cdc8fd52
-
SHA256
749050e0e9dae7b409bbfc8562baf0dc151a11c883b21e319d4c5c0120a1e635
-
SHA512
c8a92fba2addd6aba65b8429157e236443e80a01ff6996f8c54cf9da772729c51e9c4a19dd13e7f23c8934a770e2ade5865a139d01e67693ec80c6ce6e5799da
-
SSDEEP
3072:w25V3bYQL1iv92Q/s8+r0TSSxrHhv0wwD0Vrc+cY:woV3bXkQsz+Iva26
Malware Config
Signatures
Files
-
749050e0e9dae7b409bbfc8562baf0dc151a11c883b21e319d4c5c0120a1e635.exe windows x86
cdbf9ec149df4af3f0212536a7fa6bfa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
CreateThread
Sleep
GetModuleHandleA
GlobalFree
user32
SetWindowTextA
MessageBoxA
PostQuitMessage
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
LoadCursorA
GetWindowTextLengthA
SendMessageA
CreateWindowExA
RegisterClassExA
LoadImageA
LoadIconA
gdi32
CreateFontIndirectA
CreateSolidBrush
GetObjectA
ole32
CoInitialize
msvcp60
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
msvcrt
sprintf
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_EH_prolog
__CxxFrameHandler
strlen
_except_handler3
memcpy
memset
??2@YAPAXI@Z
_stricmp
malloc
getenv
memmove
strcmp
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 126KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE