Static task
static1
Behavioral task
behavioral1
Sample
34a1735f9433f6e86e6d9abfe1c32ed30cb95247f93f820979543512b9d25c27.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
34a1735f9433f6e86e6d9abfe1c32ed30cb95247f93f820979543512b9d25c27.exe
Resource
win10v2004-20220812-en
General
-
Target
34a1735f9433f6e86e6d9abfe1c32ed30cb95247f93f820979543512b9d25c27
-
Size
152KB
-
MD5
61039eceb05bcf36334153bd04eb1328
-
SHA1
ab77d236af51ed2dc88ceb89ae120eb5c61b7826
-
SHA256
34a1735f9433f6e86e6d9abfe1c32ed30cb95247f93f820979543512b9d25c27
-
SHA512
08ba02f7d04296a48fb8072dffa8278c3d4b4eea6f9eaac8cb37b9f1f6fc8d72c3190ce384bd9e70d177f7c338ccd3e7b6a7f730319e3417752c5902d286dda2
-
SSDEEP
3072:BmA+1f1NnEHThDw8McqUEJ52wi1rx+POB/nhZHwE7xGGzc:BqtNEH28MLUyswsvpHwQc
Malware Config
Signatures
Files
-
34a1735f9433f6e86e6d9abfe1c32ed30cb95247f93f820979543512b9d25c27.exe windows x86
93769f4d20d4a3ce7a1641f25bf54b0c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
SetTimeZoneInformation
SetEvent
GetPrivateProfileStringW
SetFileTime
CreateEventW
GetEnvironmentVariableA
GetConsoleFontSize
GetCurrentProcessId
GetProcessTimes
EnumSystemLocalesW
GetStartupInfoA
GetLocalTime
GetConsoleWindow
LocalLock
GetDriveTypeW
LocalReAlloc
GetModuleHandleA
GlobalFree
version
VerLanguageNameA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerFindFileW
user32
FindWindowA
MonitorFromWindow
CheckMenuItem
msvcrt
__getmainargs
_controlfp
_except_handler3
__setusermatherr
exit
_acmdln
_initterm
__p__commode
__set_app_type
_adjust_fdiv
_XcptFilter
__p__fmode
_exit
Sections
.text Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ