Static task
static1
Behavioral task
behavioral1
Sample
97c723d70b98204e4a29a54d9b842acb8a2b2e9bf4e0f1788c3ac3d5f349de05.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
97c723d70b98204e4a29a54d9b842acb8a2b2e9bf4e0f1788c3ac3d5f349de05.exe
Resource
win10v2004-20221111-en
General
-
Target
97c723d70b98204e4a29a54d9b842acb8a2b2e9bf4e0f1788c3ac3d5f349de05
-
Size
22KB
-
MD5
acc4029ddd3c3f471c9922981f5364ea
-
SHA1
98d767976f82463eb136bd6aed796c1ebc67bc65
-
SHA256
97c723d70b98204e4a29a54d9b842acb8a2b2e9bf4e0f1788c3ac3d5f349de05
-
SHA512
94f2800b968fde91f2d66db26c9f1d2cc15c4c2b462e0520f1e4c39dc78a9241efe712ef9338780eba48e8133fe1785a87e994cb0d8c7035ea535ad129ca858e
-
SSDEEP
384:xTbPTAoNIgTraLcwttZ4sSf9nvVuGNImJeFW9NvtLTxVM:x/79N/TKcwx4j9vzVeg93c
Malware Config
Signatures
Files
-
97c723d70b98204e4a29a54d9b842acb8a2b2e9bf4e0f1788c3ac3d5f349de05.exe windows x86
29c05319ba654c456d1ee9f2b84d3061
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
lstrcmpiA
GlobalAlloc
ReadFile
PeekNamedPipe
Sleep
CreateProcessA
GetStartupInfoA
CreatePipe
CreateFileA
GetModuleFileNameA
WinExec
GetTickCount
CreateDirectoryA
GetCommandLineA
GetLastError
CreateMutexA
GetCurrentThreadId
DeviceIoControl
GetVersionExA
GetModuleHandleA
WriteFile
CloseHandle
DeleteFileA
LoadLibraryA
GetProcAddress
user32
GetInputState
PostThreadMessageA
GetMessageA
LoadCursorA
CopyIcon
MessageBoxA
SetSystemCursor
advapi32
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
msvcrt
_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
strlen
strcpy
sprintf
memset
printf
strcat
memcpy
strstr
getchar
exit
fclose
fopen
strncpy
fread
fseek
__CxxFrameHandler
fscanf
remove
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_strlwr
iphlpapi
GetAdaptersInfo
ws2_32
inet_addr
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
msvcirt
??6ostream@@QAEAAV0@H@Z
??6ostream@@QAEAAV0@PBD@Z
?cout@@3Vostream_withassign@@A
?endl@@YAAAVostream@@AAV1@@Z
Sections
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ