Static task
static1
Behavioral task
behavioral1
Sample
35703026950294823be3a35d2c17d8a4054430b068cd82486cf45870ae8fbc01.exe
Resource
win7-20220812-en
General
-
Target
35703026950294823be3a35d2c17d8a4054430b068cd82486cf45870ae8fbc01
-
Size
178KB
-
MD5
4360d2868eebd420499b1cc907bcbd67
-
SHA1
aead14c0fa66934177ef81fb38cada2916552f26
-
SHA256
35703026950294823be3a35d2c17d8a4054430b068cd82486cf45870ae8fbc01
-
SHA512
b0eff835a1616b183715f7ba763545353a6a34c5d22ef01f05993b8441df798bd8fbe7bb1b1437f9ce2da66b3adee978be1090e9a45d9d119b3e421c340c7ad7
-
SSDEEP
3072:2ufDPw5rudg55q7pUuXYXOo8wFk1VNW9utAF3OmRh6OMpxI0Zi8Hi4iv:Tt+55qtUuXJUMTW6OMpe0rC4
Malware Config
Signatures
Files
-
35703026950294823be3a35d2c17d8a4054430b068cd82486cf45870ae8fbc01.exe windows x86
04488ecebe55c558292232e852606db5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNumberFormatA
SetHandleCount
GetTempPathA
SystemTimeToFileTime
GetCalendarInfoW
Sleep
ExpandEnvironmentStringsA
QueryPerformanceCounter
GetVersion
IsDBCSLeadByte
GetCPInfo
lstrcpynA
GetCurrentProcess
CreateDirectoryA
GetModuleFileNameA
GetStringTypeA
EnumResourceNamesA
DeleteFileA
GetTickCount
HeapCreate
WideCharToMultiByte
lstrcpynW
MultiByteToWideChar
GetStartupInfoA
DeleteFileW
GetVersionExA
GetLocaleInfoA
HeapDestroy
CompareStringA
InitializeCriticalSection
GetCurrentProcessId
WaitForSingleObject
HeapSize
GetFullPathNameW
ExitProcess
FindResourceA
GetStringTypeW
GetFullPathNameA
gdiplus
GdipGetImageWidth
GdipDisposeImage
ole32
CoGetMalloc
StringFromGUID2
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
Sections
.text Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ