Static task
static1
Behavioral task
behavioral1
Sample
04f29953bba7c4e7d2439c486bc31aa80bd36b168bbc3c3533814187aea35f51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
04f29953bba7c4e7d2439c486bc31aa80bd36b168bbc3c3533814187aea35f51.exe
Resource
win10v2004-20221111-en
General
-
Target
04f29953bba7c4e7d2439c486bc31aa80bd36b168bbc3c3533814187aea35f51
-
Size
157KB
-
MD5
492bbab7aa75be305f7012d3bbaf5834
-
SHA1
d881ac19a1b5fa2ac70be672c6fd127eecd1b99d
-
SHA256
04f29953bba7c4e7d2439c486bc31aa80bd36b168bbc3c3533814187aea35f51
-
SHA512
4d368d1858cbf1bb630942a837503551af57ff33074b0f4587f1ebfd370489f002ac5dbf2c947ad0310f814011e3d5b02a079131be128c940163ca07045475e2
-
SSDEEP
3072:7O0bikGlY4PwVDRVkYhE48qdZjqHIHsPpO38I/p+hrxx3IAmB:7O0yICH1xI8ap+hP3mB
Malware Config
Signatures
Files
-
04f29953bba7c4e7d2439c486bc31aa80bd36b168bbc3c3533814187aea35f51.exe windows x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ