Static task
static1
Behavioral task
behavioral1
Sample
9446329777f0e3b981f506d69d5d6b5482fa345fa418eb9c50fbcf4029e3586c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9446329777f0e3b981f506d69d5d6b5482fa345fa418eb9c50fbcf4029e3586c.exe
Resource
win10v2004-20230220-en
General
-
Target
9446329777f0e3b981f506d69d5d6b5482fa345fa418eb9c50fbcf4029e3586c
-
Size
103KB
-
MD5
881c1cc2312ba13373ff57915c0a9dd2
-
SHA1
d6ec6e7b08919b3a78560b480a94093cb1e07218
-
SHA256
9446329777f0e3b981f506d69d5d6b5482fa345fa418eb9c50fbcf4029e3586c
-
SHA512
c7bce2794497f2bb5c206eecba5a7226012a35b0b70ce1f649391c44cb804d4e89f875212e61902532a4c9d09ff28072fed833816cd5a4e0c43fd612ee3147f4
-
SSDEEP
768:WVn0/jY7ueDmXAQ5EF8hXWEXj8BP5ggr:F/jY7uJA5FIXjXIBP6
Malware Config
Signatures
Files
-
9446329777f0e3b981f506d69d5d6b5482fa345fa418eb9c50fbcf4029e3586c.exe windows x86
053d4a8be33b7db6fd55b232d4872c59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc70
ord1452
ord5714
ord812
ord817
ord821
ord819
ord823
ord2239
ord2223
ord2242
ord2237
ord2214
ord2216
ord2234
ord2026
ord2020
ord1377
ord5993
ord3610
ord5991
ord3152
ord4748
ord1234
ord4954
ord1814
ord1508
ord1507
ord1451
ord4972
ord2356
ord2546
ord2648
ord4088
ord2529
ord2675
ord2359
ord2463
ord2352
ord3522
ord3523
ord3513
ord2461
ord3751
ord4267
ord4043
ord2990
ord546
ord5950
ord5813
ord4361
ord300
ord4254
ord4250
ord4248
ord3487
ord3832
ord3814
ord5992
ord3609
ord5990
ord4107
ord1913
ord1868
ord5339
ord3614
ord899
ord4883
ord5933
ord4063
ord3640
ord1770
ord2741
ord4996
ord4998
ord2096
ord3750
ord4349
ord5002
ord4985
ord5322
ord2651
ord4262
ord4042
ord3140
ord512
ord698
ord957
ord3819
ord3452
ord3271
ord3835
ord2094
ord1765
ord2432
ord4790
ord4793
ord4090
ord3917
ord2747
ord4685
ord832
ord5126
ord2800
ord2254
ord2253
ord1409
ord5669
ord3747
ord1273
ord4929
ord4977
ord2021
ord1178
ord4058
ord4046
ord683
ord576
ord508
ord499
ord341
ord692
ord1853
ord1993
ord1992
ord5617
ord4080
ord4944
ord5007
ord5005
ord2219
ord2229
ord2227
ord2225
ord2221
ord2244
ord2232
ord4503
ord3208
ord3966
ord5989
ord4854
ord4933
ord4025
ord1272
ord3748
ord1469
ord1472
ord5666
ord1403
ord1522
ord1523
ord1870
ord4671
ord3993
ord4958
ord703
ord4516
ord705
ord982
ord5838
ord1760
ord4975
ord1744
ord956
ord1755
ord3907
ord1805
ord3051
ord1944
ord3886
ord977
ord1077
ord1081
ord5152
ord3445
ord1097
msvcr70
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
_mbsstr
atol
__CxxFrameHandler
_time64
memmove
vsprintf
_vscprintf
_mbscmp
free
malloc
_setmbcp
_except_handler3
kernel32
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
lstrlenA
GetModuleHandleA
lstrcpyA
GetProcAddress
LoadLibraryA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
SizeofResource
LockResource
LoadResource
FindResourceA
GetCommandLineA
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
user32
SetTimer
KillTimer
SetForegroundWindow
LoadIconA
UnregisterClassA
IsWindowEnabled
RedrawWindow
EndPaint
DrawEdge
FillRect
GetWindowRect
BeginPaint
GetClientRect
DefWindowProcA
SendMessageA
SetWindowLongA
GetWindowLongA
RegisterClassExA
EnableWindow
GetWindowThreadProcessId
GetSystemMetrics
SetRect
CopyRect
shell32
Shell_NotifyIconA
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE