Static task
static1
Behavioral task
behavioral1
Sample
c58849b2770b74bc40a0a733f82d5827e0b2b7d70c0cdd115ca417d10f44c49e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c58849b2770b74bc40a0a733f82d5827e0b2b7d70c0cdd115ca417d10f44c49e.exe
Resource
win10v2004-20220901-en
General
-
Target
c58849b2770b74bc40a0a733f82d5827e0b2b7d70c0cdd115ca417d10f44c49e
-
Size
227KB
-
MD5
de606d9ea407f2dd2c4f6f35bdf8b0bb
-
SHA1
50f7dcf13ffa7e1be9e01df901d4d5b9ed7665b4
-
SHA256
c58849b2770b74bc40a0a733f82d5827e0b2b7d70c0cdd115ca417d10f44c49e
-
SHA512
6bca16577942848119bcd2221ca48f189bd55f49401a7d0c29645246f141f9403775938af892cbe5589023ab96662f3d031ae8adc52810d974b87419700e4634
-
SSDEEP
6144:9YcsciyAhI5qyb9rZRCYjgx9fiWLv002k5t80RRk:9Yc3bvq8rCYj2TD0dkYQ+
Malware Config
Signatures
Files
-
c58849b2770b74bc40a0a733f82d5827e0b2b7d70c0cdd115ca417d10f44c49e.exe windows x86
501339cc28659c9bc36f652dea0ca75d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GlobalAlloc
GlobalFree
HeapDestroy
LocalAlloc
LocalFree
FormatMessageW
lstrcmpiW
HeapSize
LoadLibraryExA
LeaveCriticalSection
ExitProcess
GetVersion
DeviceIoControl
ReleaseMutex
FreeLibrary
EnterCriticalSection
InitializeCriticalSection
GetFileType
GetModuleFileNameW
lstrcmpW
VirtualLock
GetStringTypeW
msvcrt
__mb_cur_max
_stricmp
_except_handler3
_strnicmp
_XcptFilter
realloc
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
time
fopen
strchr
malloc
??2@YAPAXI@Z
__winitenv
__p__commode
_adjust_fdiv
toupper
__wgetmainargs
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ