Static task
static1
Behavioral task
behavioral1
Sample
435baf90dabe533b5fb7bae482ee55916d3ce61f3d0670fe343faefceba684be.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
435baf90dabe533b5fb7bae482ee55916d3ce61f3d0670fe343faefceba684be.exe
Resource
win10v2004-20220812-en
General
-
Target
435baf90dabe533b5fb7bae482ee55916d3ce61f3d0670fe343faefceba684be
-
Size
28KB
-
MD5
3f2c20321560adc70ebb65d1166c2116
-
SHA1
049d6106effc54c2e747db4ebfac6b1db87f38b6
-
SHA256
435baf90dabe533b5fb7bae482ee55916d3ce61f3d0670fe343faefceba684be
-
SHA512
27a6ee7380f36cfa44c631b3e8e31b4f3d5b09891034e34c30b7201507a2de6dfda98bd05dbea5e69e06ea5a00757e2f52e579d3d360ef1b44f13ca253fdf3ae
-
SSDEEP
384:wDDMN5X+PJallEMe7ZMhjJYhC6610MJPv:8DMDuEHDe7ZMYC680MJPv
Malware Config
Signatures
Files
-
435baf90dabe533b5fb7bae482ee55916d3ce61f3d0670fe343faefceba684be.exe windows x86
17e6bb0c3d3c0f92243b9a9b9ba00692
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord540
ord2818
ord2915
ord860
ord5572
ord535
ord800
ord825
msvcrt
_initterm
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_CxxThrowException
_purecall
strstr
strlen
_snprintf
sprintf
remove
rename
strcmp
__CxxFrameHandler
__setusermatherr
kernel32
FindClose
MoveFileA
FindNextFileA
FindFirstFileA
CreateDirectoryA
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcpynA
GetModuleFileNameA
CopyFileA
user32
DispatchMessageA
TranslateMessage
GetMessageA
PostQuitMessage
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ