Static task
static1
Behavioral task
behavioral1
Sample
f0403b7dea806b422bf47ecd0ad9de5f014e91799cd8dac12ad0d26d5ea2e296.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f0403b7dea806b422bf47ecd0ad9de5f014e91799cd8dac12ad0d26d5ea2e296.exe
Resource
win10v2004-20221111-en
General
-
Target
f0403b7dea806b422bf47ecd0ad9de5f014e91799cd8dac12ad0d26d5ea2e296
-
Size
140KB
-
MD5
7ab3402e3039dee7c5c6b9b942f9f547
-
SHA1
ce9ca9094bbfa7bf5cb9a71f281d010d2ad3b37d
-
SHA256
f0403b7dea806b422bf47ecd0ad9de5f014e91799cd8dac12ad0d26d5ea2e296
-
SHA512
08f630af351976656c0f4029bf9c6099a09dd7820c44e8b11cd1f761b54204cb48fee970b838ea4e00b88b6189d10749ecba8b013727e5526755dcbc2dd3b23a
-
SSDEEP
3072:4fgxEi/sjRuAzmEIF13N86yRhC5YUn5K7fEm:j6ZZz05i6yhkYjp
Malware Config
Signatures
Files
-
f0403b7dea806b422bf47ecd0ad9de5f014e91799cd8dac12ad0d26d5ea2e296.exe windows x86
17a2446bacd595182f178ac0a4964c7e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memcpy
sprintf
getenv
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
??2@YAPAXI@Z
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
atoi
_except_handler3
_ftime
strlen
_initterm
srand
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sleep
GetStartupInfoA
user32
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
DefWindowProcA
PostQuitMessage
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ