wuhen
Static task
static1
Behavioral task
behavioral1
Sample
d8262260cbe6f28f9fd299e47db092f9c54828cfcae94a7375264956a089d561.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d8262260cbe6f28f9fd299e47db092f9c54828cfcae94a7375264956a089d561.exe
Resource
win10v2004-20220812-en
General
-
Target
d8262260cbe6f28f9fd299e47db092f9c54828cfcae94a7375264956a089d561
-
Size
128KB
-
MD5
0aafcf67d209e15555b97d5edaad20fe
-
SHA1
f7cc6aea9981263701ef0623acce9ef4ff25243f
-
SHA256
d8262260cbe6f28f9fd299e47db092f9c54828cfcae94a7375264956a089d561
-
SHA512
adf0cac0f47d7775387307033cfbc7cd95d2c1d9be242f3dc80d69a629c25b17c6d8c656bcddf726d09ac70e0a9f4d8ca230fe229fe0e93c49e23ebaa89c90b0
-
SSDEEP
3072:Mektgchp/UoD6gddUz+vjPDdApAlkzPkEvpR4J:MektJ7D6gddVjPZmfzsYpRu
Malware Config
Signatures
Files
-
d8262260cbe6f28f9fd299e47db092f9c54828cfcae94a7375264956a089d561.exe windows x86
6e920f02ffb9418ec6ec4828ffd4834a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
VirtualFree
SetEvent
GetPrivateProfileSectionNamesA
MultiByteToWideChar
WideCharToMultiByte
lstrcmpA
GetVersionExA
CreateDirectoryA
GetDriveTypeA
LocalFree
LocalAlloc
RemoveDirectoryA
GetLastError
CreateProcessA
MoveFileA
GetLocalTime
CreateEventA
GlobalFree
GlobalUnlock
ReleaseMutex
SetErrorMode
WaitForSingleObject
OutputDebugStringA
Sleep
lstrlenA
InterlockedExchange
FreeLibrary
GetStartupInfoA
GetModuleHandleA
RaiseException
msvcrt
strncat
_beginthreadex
calloc
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
_errno
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
atoi
strncmp
rename
strrchr
_except_handler3
free
malloc
strchr
strstr
_ftol
__getmainargs
ceil
memmove
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
_CxxThrowException
_strnicmp
msvcp60
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Xran@std@@YAXXZ
Exports
Exports
Sections
PAGE Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ