Static task
static1
Behavioral task
behavioral1
Sample
d5bd9fb431987153b96d8fead1967d1ed367da41689c3e03d50009f669d27a70.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5bd9fb431987153b96d8fead1967d1ed367da41689c3e03d50009f669d27a70.exe
Resource
win10v2004-20221111-en
General
-
Target
d5bd9fb431987153b96d8fead1967d1ed367da41689c3e03d50009f669d27a70
-
Size
151KB
-
MD5
25f82cd9de639afdf3f1a06cdb2de2c0
-
SHA1
725b9a2d7f5bdf38edb0701f48a0c84ff79310be
-
SHA256
d5bd9fb431987153b96d8fead1967d1ed367da41689c3e03d50009f669d27a70
-
SHA512
b8179c48e2dd6c0e8d6a0a099ea424a1a29935af7cde2c60055f72d3ad759aaf10068cf2b9102b1731ebe908d2765bdacf4c3570b13ebe62f49e22f9e9fd01b7
-
SSDEEP
3072:70x39IZ699bZOEFBPsGPBCTe/lI+0evgH:wImN1xl0eo
Malware Config
Signatures
Files
-
d5bd9fb431987153b96d8fead1967d1ed367da41689c3e03d50009f669d27a70.exe windows x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ