35c965adf28e7f42c45a70778e12dd69d9a07756a391d4ab43e69b69cf688e70
- SHA256 35c965adf28e7f42c45a70778e12dd69d9a07756a391d4ab43e69b69cf688e70
Static task
static1
Behavioral task
behavioral1
Sample
Documents.lnk
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Documents.lnk
Resource
win10-en-20211208
windows10_x64
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
SharedFiles.dll
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral4
Sample
SharedFiles.dll
Resource
win10-en-20211208
windows10_x64
0 signatures
0 seconds
General
- Target 35c965adf28e7f42c45a70778e12dd69d9a07756a391d4ab43e69b69cf688e70
- Size 355KB
- Sample220128-qhb2vadfc9
- SHA256 35c965adf28e7f42c45a70778e12dd69d9a07756a391d4ab43e69b69cf688e70
- MD5 93184fd30511965de7d816707b64ee69
- SHA1 a051eca3ac18fe41cb15d9656eebe242ccf0a104
- SHA512 606c142cc3874610eb39e9ab50f407997df08b8348a78396975a90219b85a5667dc123229b0e41d1e5c5b5b3201d721898aec3736f28ce729f80984b833e5fa1
- SSDEEP 6144:iJzclfCSessmR10zDq49c6QuFhagItgJQ7rouAn2RVnUpayBq0m2G0L0kpc:iJzcl6320YYag3S0uAneTPCJTc
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
35c965adf28e7f42c45a70778e12dd69d9a07756a391d4ab43e69b69cf688e70.zip 355KB
-
new-documents-2030.iso.iso 654KB
-
Documents.lnk.lnk 1KB
-
SharedFiles.dll.dll 601KB
new-documents-2030.iso
- SHA256 8b0513149554b8ab091a1486f5767306c3762b8f48a7f2129e0cb1350f03abb4
- MD5 5c6f63b053fe0190f3059a83510a0161
- SHA1 a228ed25c393d2f4a745457fcd0e444973f28fe7
- SHA512 32c4824fefeed94a5b62daa5a57ea14b937cfea1dc0bb1f745e40e0b8f59199871caf79bfabd1e57152ca9595314ba6c50ac701bb43874bddb783446e6dc1078
- SSDEEP 12288:V2OXWJQZKFgQJIdevPV6N/+aYcfbEJVgmn+hPl:zbGhPvPV6N/+Bcfb4uc+h
- MD5 SHA1 SHA512 SSDEEP
Documents.lnk
- SHA256 e87f9f378590b95de1b1ef2aaab84e1d00f210fd6aaf5025d815f33096c9d162
- MD5 4d8af5ba95aa23f7162b7bbf8622d801
- SHA1 d5b8c1a219686be5b75e58c560609023b491d9aa
- SHA512 f64416dbce111afe375efe031b05ed5b5b5c00c956d3c419d733147e4f0e751a60f3a22c72c36d45841abf85013c9647c6dc040cdd3d56c9b8cc35bccfd60d2c
- SSDEEP 24:8gyn0C7fCdL++CylTyAKOex+/CluTRslo0aPHtlpHtAWBpAXD/zusmv:83BALOyltKnLlkR2o5BlBqXjzus
- MD5 SHA1 SHA512 SSDEEP
SharedFiles.dll
- IMPHASH c270086ea8ef591ab09b6ccf85dc6072
- SHA256 b60a22be0a21e0a4c52a0fe0fecc2b55205297e1ddafd2364f75b46b8deedb74
- MD5 adf5dc4ac48443f7042237921620a740
- SHA1 492528054a7de48cfab7ca982bfd7a5459b3e062
- SHA512 ae629b9181b773a00d6ac74dc2b262fe87995c8f5ae58ae3c3a7b2d7784b99dc382ef41fa02ff35bbdfea76aac638fa7a43b6fc00ea6fdc5b66a1bcca60568ba
- SSDEEP 12288:J2OXWJQZKFgQJIdevPV6N/+aYcfbEJVgmn+hPlF:vbGhPvPV6N/+Bcfb4uc+hT
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
183184
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetFileAttributesW
GetFileSizeEx
GetFileTime
GetTickCount
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
FlsSetValue
GetCommandLineA
RtlUnwindEx
Sleep
RaiseException
RtlPcToFileHeader
HeapQueryInformation
HeapReAlloc
HeapSize
GetSystemInfo
EncodePointer
DecodePointer
FlsGetValue
FlsFree
FlsAlloc
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenA
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
FormatMessageW
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
TlsGetValue
LocalFree
LocalAlloc
WritePrivateProfileStringW
MulDiv
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFindAtomW
GetVersionExW
CompareStringW
GetVersionExA
lstrlenW
GlobalUnlock
CloseHandle
FreeResource
GlobalFree
GlobalAddAtomW
GetCurrentProcessId
GetLastError
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
GetModuleFileNameW
lstrcmpA
GetLocaleInfoW
WideCharToMultiByte
CompareStringA
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GlobalLock
lstrcmpW
GlobalAlloc
GetModuleHandleW
VirtualProtect
VirtualAlloc
SetLastError
IsBadReadPtr
GetProcessHeap
VirtualFree
HeapFree
HeapAlloc
VirtualQuery
GetNativeSystemInfo
LoadLibraryA
GetProcAddress
LoadLibraryW
FreeLibrary
GetFileType
ExitProcess
user32
DestroyMenu
RegisterClipboardFormatW
PostThreadMessageW
SetCapture
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetSysColorBrush
ClientToScreen
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageA
SendDlgItemMessageW
WinHelpW
IsChild
GetCapture
GetClassNameW
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
UnhookWindowsHookEx
GetWindowTextW
GetClientRect
CopyRect
GetDesktopWindow
EnableWindow
SendMessageW
SetWindowPos
LoadIconW
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
CharUpperW
GetTopWindow
UpdateWindow
IsWindow
GetCursorPos
ReleaseDC
GetWindowLongW
BringWindowToTop
InvalidateRect
GetDC
PtInRect
LoadCursorW
GetKeyState
GetWindowRect
ScreenToClient
SetCursor
ReleaseCapture
SetFocus
GetFocus
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuW
GetParent
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
PostQuitMessage
PostMessageW
MessageBoxW
IsWindowEnabled
GetLastActivePopup
GetWindowThreadProcessId
MapDialogRect
SetWindowContextHelpId
GetWindow
ValidateRect
PeekMessageW
gdi32
ExtSelectClipRgn
DeleteDC
GetStockObject
GetBkColor
GetTextColor
GetRgnBox
GetMapMode
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
LineTo
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SetMapMode
RestoreDC
SaveDC
GetDeviceCaps
DeleteObject
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateRectRgnIndirect
CreateBitmap
MoveToEx
ExtTextOutW
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
shell32
SHGetFileInfoW
shlwapi
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
oledlg
OleUIBusyW
ole32
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleFlushClipboard
CoRegisterMessageFilter
CoGetClassObject
oleaut32
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
BasicScore
Name
.text
Size
259KB
Virtual Size
258KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
170KB
Virtual Size
193KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ