Static task
static1
Behavioral task
behavioral1
Sample
c5b42acda1722c5ae3ae9e7b9522782e47b6b7e1d7869f1d1b71975e51f2458c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c5b42acda1722c5ae3ae9e7b9522782e47b6b7e1d7869f1d1b71975e51f2458c.exe
Resource
win10v2004-20220812-en
General
-
Target
c5b42acda1722c5ae3ae9e7b9522782e47b6b7e1d7869f1d1b71975e51f2458c
-
Size
32KB
-
MD5
b2bd9105a951e8ccad3585681c088ddb
-
SHA1
22a833ca3d679f32d7990278cba7b256e7cef489
-
SHA256
c5b42acda1722c5ae3ae9e7b9522782e47b6b7e1d7869f1d1b71975e51f2458c
-
SHA512
f3d2b364b91436308f64a36ed0ee8f2b138470076c8279ec25512eb6a4926314992a82b39a66f5ce90b1cd6796b478428c520408ddb973891930a34e23b91402
-
SSDEEP
768:Q/TOsp1CjjPN5rf12MQxBsku24HkDqSLN:Q/x2jLIMCBcFmqSLN
Malware Config
Signatures
Files
-
c5b42acda1722c5ae3ae9e7b9522782e47b6b7e1d7869f1d1b71975e51f2458c.exe windows x86
910f176b6c7b0fc0ff254ed7770d95b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeThread
GetModuleFileNameA
LoadLibraryA
TerminateProcess
GetCurrentProcessId
Sleep
SleepEx
SetLastError
GetLastError
GetCurrentThread
GetModuleHandleA
GetProcAddress
GetStartupInfoA
msvcrt
strcpy
calloc
malloc
_snprintf
strtok
tolower
_pctype
_isctype
__mb_cur_max
strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strstr
memset
strncpy
memcpy
strlen
_stricmp
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE