Static task
static1
Behavioral task
behavioral1
Sample
eac908d6d0308d0b140c749b2bd9f9ca0fb8c77411c5ffad56ce2b60a156aa51.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eac908d6d0308d0b140c749b2bd9f9ca0fb8c77411c5ffad56ce2b60a156aa51.exe
Resource
win10v2004-20220812-en
General
-
Target
eac908d6d0308d0b140c749b2bd9f9ca0fb8c77411c5ffad56ce2b60a156aa51
-
Size
26KB
-
MD5
677a64057860321c21b6220c60fb9f3c
-
SHA1
349ff0fdd83455b982994e6d983b647a31002d1a
-
SHA256
eac908d6d0308d0b140c749b2bd9f9ca0fb8c77411c5ffad56ce2b60a156aa51
-
SHA512
68a189f55d0c15cb67d0f5609b4451f35c4a752f6aa5b84fde78f90b987120a176ec5ad18877fe141f6e3985d10473c9d111b881082f9e794267804e733b45ca
-
SSDEEP
384:jkhg9eVjAWkYznhNLFkEMrRdIvViwhUZl0mDWoaeyaxeXjVDFi:Ahg9ehdzhNLFktO4/4mKonx+jG
Malware Config
Signatures
Files
-
eac908d6d0308d0b140c749b2bd9f9ca0fb8c77411c5ffad56ce2b60a156aa51.exe windows x86
8f68642d655009a31101c3225e3d44dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_XcptFilter
_exit
_cexit
__getmainargs
memset
_ismbblead
??2@YAPAXI@Z
time
??3@YAXPAX@Z
srand
rand
strncpy
strlen
strncat
__CxxFrameHandler
msvcp60
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
kernel32
FindResourceA
SetErrorMode
FreeLibrary
LoadResource
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
ExitProcess
GetTempPathA
CloseHandle
GetCurrentThreadId
EnumResourceNamesA
CreateMutexA
GetModuleFileNameA
LockResource
LoadLibraryA
SetFileAttributesA
GetLongPathNameA
GetProcAddress
GetLastError
CreateProcessA
SizeofResource
Sleep
user32
CharUpperA
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ