Static task
static1
Behavioral task
behavioral1
Sample
35ca5ef18f678a30569bbd438f6a5b1d.exe
Resource
win7-20220414-en
General
-
Target
35ca5ef18f678a30569bbd438f6a5b1d.exe
-
Size
177KB
-
MD5
35ca5ef18f678a30569bbd438f6a5b1d
-
SHA1
487433c4c33f1af8b87045ebdc0df76b46c7b0dd
-
SHA256
66dac97c59b5cacc0ff9ade1f96ea85f242eb327c4ad7a5b63e9bdc6e549ebe0
-
SHA512
39947ece578b2e73fc1147597eba7c802f3e90f4aaa487bc6fec74ddc2f4cc8f7a640e397ad01c7cf3ee366f528de2b7f8fc1e4054a12dfda775eb9e96cefd37
-
SSDEEP
1536:Agd+bdkNcrQ2C98y9lhHsWsDlPMSG/cpuyCKTL6n4HEnXF+swItySQXXou2Ck/C+:tsvrQ2slhMpMWCKTL6nXiMyM/eWTVR
Malware Config
Signatures
Files
-
35ca5ef18f678a30569bbd438f6a5b1d.exe.exe windows x86
220faf072f675cf5123d17f993daa33f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetModuleFileNameW
OpenEventW
InterlockedIncrement
GetSystemDirectoryW
MoveFileExA
GlobalFree
GetCPInfoExW
BeginUpdateResourceA
EnumCalendarInfoExW
MoveFileW
ReadConsoleOutputCharacterW
GetConsoleAliasesLengthW
LocalAlloc
GetProcAddress
EnumResourceNamesW
RemoveDirectoryW
CommConfigDialogW
SetFileAttributesA
SetCommTimeouts
OpenJobObjectA
LCMapStringW
GetAtomNameW
GetFileAttributesW
SetConsoleTitleW
ReplaceFileA
GetBinaryTypeA
GetShortPathNameA
GetUserDefaultLangID
GetGeoInfoW
GetConsoleAliasW
GetLastError
GetTickCount
GetCurrentProcess
FreeLibrary
GetEnvironmentStrings
SetFileTime
FindResourceExW
SetConsoleMode
GetDiskFreeSpaceA
GetConsoleAliasExesW
WaitForMultipleObjects
SetDefaultCommConfigW
HeapFree
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
RtlUnwind
HeapAlloc
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
IsProcessorFeaturePresent
Sleep
HeapSize
GetModuleHandleW
ExitProcess
CloseHandle
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
SetFilePointer
ReadFile
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
GetStringTypeW
WriteConsoleW
CreateFileW
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tor Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bajol Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zoluh Size: 512B - Virtual size: 23B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.feko Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ