Static task
static1
Behavioral task
behavioral1
Sample
34f56e06e61a41de169c62e7af7d5340157e265369660597a23a1a59dc189870.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
34f56e06e61a41de169c62e7af7d5340157e265369660597a23a1a59dc189870.exe
Resource
win10v2004-20220901-en
General
-
Target
34f56e06e61a41de169c62e7af7d5340157e265369660597a23a1a59dc189870
-
Size
71KB
-
MD5
5ddae1f4032b1287ab4d83878f7ae3d0
-
SHA1
ecbd55cc0f3a7688753d46d0a161699fcb2c1092
-
SHA256
34f56e06e61a41de169c62e7af7d5340157e265369660597a23a1a59dc189870
-
SHA512
48d0907c7e313cceccbbd9e19855d749c80a604d2ad4a24730c504ee89d29b27006c5b31b04a0b0e36170bae1d72ad14790993a712f1e7174bd399fd8ab669ed
-
SSDEEP
1536:8KBfZiEr78U6JotqWMynN/FKC0ZDFtfSFzjG:f1ZiEFNqWHn6CkqFP
Malware Config
Signatures
Files
-
34f56e06e61a41de169c62e7af7d5340157e265369660597a23a1a59dc189870.exe windows x86
3ec6d7a201f6b9683dd1283f9a378e7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CompareFileTime
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FreeLibrary
GetLastError
GetSystemTime
GetSystemTimeAsFileTime
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsValidCodePage
IsValidLocale
LeaveCriticalSection
LocalAlloc
LocalFree
QueryPerformanceCounter
QueryPerformanceFrequency
SetEvent
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
lstrcpyA
lstrcpynA
lstrlenA
lstrlenW
user32
IsWindow
RegisterShellHookWindow
ole32
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoUninitialize
SetErrorInfo
oleaut32
LoadRegTypeLib
LoadTypeLib
RegisterTypeLib
SysAllocString
SysAllocStringLen
SysFreeString
VariantClear
wininet
CommitUrlCacheEntryW
CreateUrlCacheEntryW
HttpOpenRequestA
InternetOpenUrlW
SetUrlCacheEntryInfoW
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 255B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ