Static task
static1
Behavioral task
behavioral1
Sample
c0854132c4f1ff2b8e76498414a98d3c13eb07148e6c74833a08f9ba64725ea6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0854132c4f1ff2b8e76498414a98d3c13eb07148e6c74833a08f9ba64725ea6.exe
Resource
win10v2004-20221111-en
General
-
Target
c0854132c4f1ff2b8e76498414a98d3c13eb07148e6c74833a08f9ba64725ea6
-
Size
95KB
-
MD5
2be3da07557b8627b0fa02f1afd207ad
-
SHA1
20a8440266fa4d505d8eb0c062e9deeee7d66916
-
SHA256
c0854132c4f1ff2b8e76498414a98d3c13eb07148e6c74833a08f9ba64725ea6
-
SHA512
8444c559a81ba3f807f700d7260fd3e93042bf52d28e882edc01848728ee383a1989880910a68d2b3564a1bb18281df63bca2c8c0309b119725df1233c3bc505
-
SSDEEP
1536:FAMhtFtrRvhCTES6w5HoSZKCQmh2eettdefH5O9F/5hM3uYCnouy88:FAMhtTRvhCTNlHouNQO8ty5AFBhuWout
Malware Config
Signatures
Files
-
c0854132c4f1ff2b8e76498414a98d3c13eb07148e6c74833a08f9ba64725ea6.exe windows x86
55937ac0babf60e54cf2abf42a66aa6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
sprintf
strstr
atol
strcat
??2@YAPAXI@Z
memset
rand
printf
_except_handler3
??3@YAXPAX@Z
_write
_setmode
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
GetTickCount
Sleep
GetModuleHandleA
LoadLibraryA
GetProcAddress
FindResourceA
LoadResource
LockResource
SizeofResource
GetStartupInfoA
user32
CharToOemA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ