Static task
static1
Behavioral task
behavioral1
Sample
787ed49197f7b68e90c470de4ba5d7a82b8230c70bb1ed23d1ede414df514b3c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
787ed49197f7b68e90c470de4ba5d7a82b8230c70bb1ed23d1ede414df514b3c.exe
Resource
win10v2004-20220812-en
General
-
Target
787ed49197f7b68e90c470de4ba5d7a82b8230c70bb1ed23d1ede414df514b3c
-
Size
37KB
-
MD5
3ab1826be5ad94e3a208216167ca0e4c
-
SHA1
6e94eed792bfed52ccad8a862069b8e6bbdba897
-
SHA256
787ed49197f7b68e90c470de4ba5d7a82b8230c70bb1ed23d1ede414df514b3c
-
SHA512
988450f08f54389fbaa36123b22c95ee1d3454573fa2f201a1494f3e8bc3f56607329f2553e6705b84cbec60559b544bc8e1be05218580ed917a2421667eb68c
-
SSDEEP
384:d4UkwJUp9lg3n0rhHcykSg39FikZcwXE/4uDHlpUHaszBfNeO8cFp123QEzI/cJ:dIv80rh8dFi/MuDHvUHaszBleOhzREgE
Malware Config
Signatures
Files
-
787ed49197f7b68e90c470de4ba5d7a82b8230c70bb1ed23d1ede414df514b3c.exe windows x86
ef7be3675f10f63a90051fe21e250e63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
GetUserNameA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
kernel32
AddAtomA
CopyFileA
ExitProcess
FindAtomA
GetAtomNameA
GetComputerNameA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
GetVersion
SetFileAttributesA
SetUnhandledExceptionFilter
Sleep
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_beginthread
_cexit
_endthread
_iob
_onexit
_setmode
abort
atexit
atoi
fflush
fprintf
free
malloc
memset
printf
puts
rand
signal
sprintf
srand
strcat
strchr
strcpy
strlen
strncpy
system
time
ws2_32
WSACleanup
WSAGetLastError
WSAStartup
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyname
inet_ntoa
recv
send
socket
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE