Static task
static1
Behavioral task
behavioral1
Sample
35d1fa7feffeb02de85e5726deb2c229d45ef193a1684afd97faeb01f1166e0e.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
35d1fa7feffeb02de85e5726deb2c229d45ef193a1684afd97faeb01f1166e0e.exe
Resource
win10v2004-20220414-en
General
-
Target
35d1fa7feffeb02de85e5726deb2c229d45ef193a1684afd97faeb01f1166e0e
-
Size
240KB
-
MD5
180332aa8761749cb03a06e000e614f2
-
SHA1
4be7216002a0b13c2c7772728e1c0047f5d39f85
-
SHA256
35d1fa7feffeb02de85e5726deb2c229d45ef193a1684afd97faeb01f1166e0e
-
SHA512
838b214cca0aa92987e01cb83aeabe5f5d404dc9d90332fee869c42883abe27a59f4e06c4939502f51ae8ac358f24f2ec866317fb52baea0e415b3ed383c61be
-
SSDEEP
3072:w/upbURTi+Urs7V196QkTZALbGW2hjFAm3xD7ygXvrJrJmTInK5h5vypMDvdYeRl:fuQgJ19xFLshRLxPNjJrJvK5byi/Rxzz
Malware Config
Signatures
Files
-
35d1fa7feffeb02de85e5726deb2c229d45ef193a1684afd97faeb01f1166e0e.exe windows x86
a449cbcc66e31717c40783fe089e75c3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
VkKeyScanExA
ChildWindowFromPointEx
ScrollDC
IsWindowVisible
PostQuitMessage
MessageBeep
LoadCursorA
GetDoubleClickTime
CharToOemBuffW
GetScrollRange
GetMessagePos
CreateDialogParamW
LoadBitmapW
CharNextW
ShowWindow
ModifyMenuA
UpdateWindow
GetSystemMenu
VkKeyScanW
shell32
SHGetPathFromIDListA
ole32
OleTranslateAccelerator
OleInitialize
OleCreateMenuDescriptor
advapi32
RegSetValueExA
RegCreateKeyA
gdi32
GetCharWidthA
CreateDCA
netapi32
NetEnumerateComputerNames
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryA
GetLocaleInfoA
VirtualFree
RtlUnwind
IsDebuggerPresent
EncodePointer
GetThreadPriority
OpenProcess
GetCurrentProcessId
FindResourceW
FormatMessageW
GetWindowsDirectoryW
PeekNamedPipe
GetCurrentDirectoryA
VirtualAlloc
HeapDestroy
EnumResourceNamesW
GetShortPathNameW
LocalReAlloc
OpenFile
QueryPerformanceFrequency
WaitForMultipleObjects
GetWindowsDirectoryA
LoadLibraryW
ResetEvent
HeapAlloc
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ