Static task
static1
Behavioral task
behavioral1
Sample
b015d70d9c883e0ef3ff6eb73c5601c15a80b9a428dd5a6e6d53c6889c88ca96.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b015d70d9c883e0ef3ff6eb73c5601c15a80b9a428dd5a6e6d53c6889c88ca96.exe
Resource
win10v2004-20220901-en
General
-
Target
b015d70d9c883e0ef3ff6eb73c5601c15a80b9a428dd5a6e6d53c6889c88ca96
-
Size
31KB
-
MD5
141f1806eafd0c365c3429619e999d91
-
SHA1
d66953b7036053999f506cb134cff98ff30160fa
-
SHA256
b015d70d9c883e0ef3ff6eb73c5601c15a80b9a428dd5a6e6d53c6889c88ca96
-
SHA512
4f5f5d3c1521d00fc7706c13bbf23e3a1cc7dfd890f5103596295a396ccb9c0676b6050f6cde2c2a5393378b9ad3b9c5050f2171892daeda44a91df42968727e
-
SSDEEP
768:Uh5c55+9KmhWT3Kf3pAj5F7f32FogyXMVWvkHCbdgfLsXzrH9byqxUPr0pB79KXL:UL7Cpkm2V8mwBe
Malware Config
Signatures
Files
-
b015d70d9c883e0ef3ff6eb73c5601c15a80b9a428dd5a6e6d53c6889c88ca96.exe windows x86
d72e3fcccb3591b92984956e4cb3c202
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr71
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
atoi
strncpy
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_snprintf
_amsg_exit
??1type_info@@UAE@XZ
_CxxThrowException
strtok
srand
strstr
strchr
??_V@YAXPAX@Z
__CxxFrameHandler
memcpy
strcat
sprintf
rand
strcmp
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
??_U@YAPAXI@Z
strcpy
_vsnprintf
strlen
__getmainargs
_except_handler3
?terminate@@YAXXZ
msvcp71
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
user32
wsprintfA
oleaut32
GetErrorInfo
kernel32
lstrcmpA
lstrcmpiA
ExitProcess
GetModuleHandleA
GetProcAddress
GetCurrentProcess
ReadProcessMemory
GetModuleFileNameA
GetLastError
GetLocaleInfoA
GetVersionExA
Sleep
GetTickCount
lstrcpyA
lstrlenA
LoadLibraryA
GetStartupInfoA
LocalFree
lstrcpynA
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE