Static task
static1
Behavioral task
behavioral1
Sample
51b35faa2b0efe8310e124cc1c1f5494c1a09b65d2f3d07682a7351b7cf1511f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
51b35faa2b0efe8310e124cc1c1f5494c1a09b65d2f3d07682a7351b7cf1511f.exe
Resource
win10v2004-20230220-en
General
-
Target
51b35faa2b0efe8310e124cc1c1f5494c1a09b65d2f3d07682a7351b7cf1511f
-
Size
356KB
-
MD5
1b946ca85629b591a5fd61e0723fec4c
-
SHA1
1491676703abb01d15d2ee55dde8a594fe76b9b2
-
SHA256
51b35faa2b0efe8310e124cc1c1f5494c1a09b65d2f3d07682a7351b7cf1511f
-
SHA512
083ede7bb5fbce516115b55d48f7f9e6df3143fc8beb43151f2861ae14ffaadb026147c5256de757219a45382b6b80876e31c1642c8c58a7d41b9d788083a8ba
-
SSDEEP
6144:lYts9u2Kcl86z5y4ZaEv6iVBHdGz078eRvz9cwYu/UzVTS2d7BiA:lYyQ2dl8i5y4ZaZiVbGI7jqc/UVSi
Malware Config
Signatures
Files
-
51b35faa2b0efe8310e124cc1c1f5494c1a09b65d2f3d07682a7351b7cf1511f.exe windows x86
3b5d091495ff53e28d7d63ad9fff8d31
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
rand
_access
mbstowcs
wcslen
wcstombs
atoi
wcscpy
_strupr
_beginthreadex
memcpy
calloc
_CIacos
printf
strncat
__dllonexit
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strcat
vsprintf
exit
fopen
fwrite
fclose
strrchr
_except_handler3
free
strcmp
strcpy
malloc
memcmp
memset
strlen
_ftol
memmove
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
_CIpow
_chkesp
wininet
InternetOpenA
InternetOpenUrlA
InternetReadFile
mfc42d
ord714
msvcrtd
_CrtDbgReport
kernel32
GetModuleHandleA
GetExitCodeThread
TerminateThread
CreateThread
MultiByteToWideChar
lstrlenA
SetEvent
WaitForSingleObject
LoadLibraryA
GetProcAddress
CloseHandle
Sleep
CreateEventA
GetStartupInfoA
user32
GetMessageA
PostThreadMessageA
CreateWindowExA
IsWindow
SendMessageA
wsprintfA
ws2_32
getsockname
gethostname
send
select
closesocket
recv
ntohs
socket
gethostbyname
htons
connect
setsockopt
WSACleanup
WSAStartup
msvcp60d
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
msvfw32
ICSendMessage
winmm
waveInReset
waveInClose
waveInUnprepareHeader
waveInPrepareHeader
waveInAddBuffer
waveInStart
waveOutUnprepareHeader
waveOutOpen
waveOutClose
waveOutWrite
waveOutPrepareHeader
waveInOpen
Sections
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 316KB - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ