Static task
static1
Behavioral task
behavioral1
Sample
35c35175c681c805e8b12413243324b24573f63533d649f0d88e2b8b58b90182.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
35c35175c681c805e8b12413243324b24573f63533d649f0d88e2b8b58b90182.exe
Resource
win10v2004-20220414-en
General
-
Target
35c35175c681c805e8b12413243324b24573f63533d649f0d88e2b8b58b90182
-
Size
121KB
-
MD5
dccd504e5e44c162e8461ad9ad286ee3
-
SHA1
e2a68b76db070380809754b7a0fa1cf8a0786f27
-
SHA256
35c35175c681c805e8b12413243324b24573f63533d649f0d88e2b8b58b90182
-
SHA512
b52b884420af198361ee650ca61ee9b64463b89469d0d54c8a00c06cdf27ff201ecd6262c3dc3cb959d487c8040e2e3d993f8fc09e8f59bf8c5e74119a69ff04
-
SSDEEP
1536:ou0q5JeVSAJSP8FIh6ZR/roQYLcjyu7WpivCnU6jexns5rT1sYbpO2RPDL/zCh8f:vQSAJSP1hiR/rzuu7WpmZk0nEZNNB
Malware Config
Signatures
Files
-
35c35175c681c805e8b12413243324b24573f63533d649f0d88e2b8b58b90182.exe windows x86
da0bbcf3aca423c6a2bafa0d7a199b8f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpi
GetStartupInfoA
WriteConsoleW
GetProcAddress
LoadLibraryA
GetLocalTime
lstrcmpi
GetTickCount
lstrcmpi
GetSystemDirectoryW
DeleteFileA
lstrcmpi
lstrcmpi
GetSystemDirectoryW
AllocConsole
LeaveCriticalSection
GetLogicalDriveStringsW
GetModuleHandleW
OpenMutexW
CreateFileW
lstrcmpi
GetCurrentThreadId
LoadLibraryExA
FindFirstFileW
OpenFileMappingA
advapi32
RegReplaceKeyW
LogonUserA
RegRestoreKeyA
RegDeleteValueW
OpenEventLogW
RegEnumKeyW
OpenServiceA
RegSaveKeyW
InitializeSid
RegLoadKeyA
RegCreateKeyExW
CryptSignHashW
RegCloseKey
certcli
CADeleteCA
CACloseCertType
cryptdll
CDBuildVect
MD5Final
CDLocateRng
shell32
ShellMessageBoxW
SHGetDesktopFolder
DragQueryPoint
DragQueryFileW
SHDefExtractIconA
FindExecutableA
ShellAboutW
SHQueryRecycleBinA
SHGetFileInfoW
SHGetFolderPathW
DllGetClassObject
SHFileOperationW
DllGetVersion
SHGetSettings
DuplicateIcon
ShellExecuteA
DragFinish
user32
DialogBoxParamW
PeekMessageW
DrawStateW
FlashWindow
InsertMenuW
LoadIconA
DispatchMessageA
IsDialogMessageA
IsCharLowerA
wsprintfW
GetPropW
GetMessageW
GetDlgItemTextA
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_MEM_EXECUTE
.jdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jdata Size: 1024B - Virtual size: 973B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ