Static task
static1
Behavioral task
behavioral1
Sample
901b8a73e7da7315053e1f079bce1bb3cbd67264eddb5a7e572840c6a41ef214.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
901b8a73e7da7315053e1f079bce1bb3cbd67264eddb5a7e572840c6a41ef214.exe
Resource
win10v2004-20221111-en
General
-
Target
901b8a73e7da7315053e1f079bce1bb3cbd67264eddb5a7e572840c6a41ef214
-
Size
22.5MB
-
MD5
b6fd667f668f576f5b4fd7f7da5c9cb3
-
SHA1
e37ce915cd688d6a183727583fa6a4e56e440534
-
SHA256
901b8a73e7da7315053e1f079bce1bb3cbd67264eddb5a7e572840c6a41ef214
-
SHA512
73e5a832e3351df046892e5ab48f70a80b1410b70fc6a8994441e6c31dbfac34c0ea7542c5e522d1e3cc18e72a85a5c3f15e541c71425f41a4f6d2fd77080bdb
-
SSDEEP
192:72cL2lgowGxCAPy2dNQOWAZEOVMuYILb+raHce9zHJCMQtAwiT61oyYJ+Ra6:72cLjw5xgOFrzQtAjT61mJ+j
Malware Config
Signatures
Files
-
901b8a73e7da7315053e1f079bce1bb3cbd67264eddb5a7e572840c6a41ef214.exe windows x86
edc40dd28247ffe27cf8ee4cb948bbd8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemTime
GetTempPathA
DeleteFileA
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
CreateThread
ExitProcess
CopyFileA
CloseHandle
CreateProcessA
GetStartupInfoA
GetModuleHandleA
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyA
msvcrt
fclose
fwrite
_except_handler3
sprintf
rand
srand
time
fread
fseek
fscanf
fputs
fgets
__CxxFrameHandler
_CxxThrowException
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
fopen
_stricmp
winmm
timeGetTime
ws2_32
gethostbyname
socket
WSAStartup
connect
send
inet_addr
htons
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ