Static task
static1
Behavioral task
behavioral1
Sample
a7e692d036582820957b6c74e92c7cbd376378c6778976f97d783f027457327e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a7e692d036582820957b6c74e92c7cbd376378c6778976f97d783f027457327e.exe
Resource
win10v2004-20230220-en
General
-
Target
a7e692d036582820957b6c74e92c7cbd376378c6778976f97d783f027457327e
-
Size
116KB
-
MD5
058021cbfd596de64ada21a051188160
-
SHA1
a90169ba55bb884ae0f404f8970df94ae6566e10
-
SHA256
a7e692d036582820957b6c74e92c7cbd376378c6778976f97d783f027457327e
-
SHA512
3dac7109ca1299416aa92a9113f22d862e884c75996f7e87117321f00dba8f3c530c6fcb5c287006be689049a5ef21a8c9155805cee6e3a25b9667bb9a4f9842
-
SSDEEP
384:HjS3duMKnIl/RNKZa0IKu0MqW1AqQpee:2UMa2UIKxMqAAEe
Malware Config
Signatures
Files
-
a7e692d036582820957b6c74e92c7cbd376378c6778976f97d783f027457327e.exe windows x86
e446c097091e65b2f3cb757d383302e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
CloseHandle
CreateMutexA
GetProcAddress
MultiByteToWideChar
lstrlenA
GetModuleFileNameA
GetStartupInfoA
LoadLibraryA
FreeLibrary
GetCommandLineA
OpenProcess
GetLastError
GetModuleHandleA
user32
DispatchMessageA
UpdateWindow
TranslateMessage
GetMessageA
KillTimer
PostQuitMessage
SetTimer
DefWindowProcA
PostMessageA
CreateWindowExA
ShowWindow
RegisterClassExA
ole32
CoFreeLibrary
CoLoadLibrary
ws2_32
WSAStartup
gethostbyname
inet_addr
ntohl
WSACleanup
inet_ntoa
gethostname
msvcrt
_controlfp
strcat
_adjust_fdiv
memcpy
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strstr
atoi
_except_handler3
__set_app_type
__p__fmode
strlen
__p__commode
strncpy
tolower
memset
srand
strcpy
_splitpath
rand
time
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
qsbqbh Size: - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 84KB - Virtual size: 81KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE