Static task
static1
Behavioral task
behavioral1
Sample
e5f0e7b32db95a5cce1e53c013535fa372a6f524786bb84c9502beea38971df3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e5f0e7b32db95a5cce1e53c013535fa372a6f524786bb84c9502beea38971df3.exe
Resource
win10v2004-20221111-en
General
-
Target
e5f0e7b32db95a5cce1e53c013535fa372a6f524786bb84c9502beea38971df3
-
Size
27KB
-
MD5
0f14c6a355bf0769d8aada42a68a8145
-
SHA1
9940e4621a9ee979651d475c93996934f7deffb9
-
SHA256
e5f0e7b32db95a5cce1e53c013535fa372a6f524786bb84c9502beea38971df3
-
SHA512
4b0f6c7f4026b725a523efd47e392fc56b15bdd597e8322664883f8a2fee612635f82bc0ddf0b4bfcceded2e0c6c53732ce5865aa24b2fb327e6fa31722522f8
-
SSDEEP
768:bTD95+9KmhWT3Kf3pAmH5FrxgAM9MbdgfLsXzra9GqI3YRO1pzk+aaogrYce0sL7:bTDK4xTPNyeTFvT
Malware Config
Signatures
Files
-
e5f0e7b32db95a5cce1e53c013535fa372a6f524786bb84c9502beea38971df3.exe windows x86
0a94f3fdc5978994c9b993da9da935bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr71
atoi
srand
memcmp
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
strncpy
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strtok
_snprintf
strstr
strchr
__CxxFrameHandler
strcat
sprintf
rand
memcpy
strcmp
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
strcpy
_vsnprintf
strlen
_cexit
_except_handler3
user32
wsprintfA
kernel32
lstrlenA
lstrcmpA
lstrcpynA
GetTempPathA
LoadLibraryA
GetProcAddress
GetModuleHandleA
ExpandEnvironmentStringsA
WaitForSingleObject
GetLastError
TerminateThread
lstrcmpiA
ExitThread
Sleep
GetTickCount
GetStartupInfoA
lstrcpyA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 273KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE