Static task
static1
Behavioral task
behavioral1
Sample
635c8659bb8ea060a3f33ad8bf8537438077dbc3e451a2aaf1836ddb9d9e50d4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
635c8659bb8ea060a3f33ad8bf8537438077dbc3e451a2aaf1836ddb9d9e50d4.exe
Resource
win10v2004-20220812-en
General
-
Target
635c8659bb8ea060a3f33ad8bf8537438077dbc3e451a2aaf1836ddb9d9e50d4
-
Size
380KB
-
MD5
601120eb995abad4a0ac9e46b2ad08f0
-
SHA1
a2fd9fd90b63cda97ab311e02ca23ae6cb7e3f84
-
SHA256
635c8659bb8ea060a3f33ad8bf8537438077dbc3e451a2aaf1836ddb9d9e50d4
-
SHA512
30cbaa956d8f18c28b01ce8599a49528453ad54cf2fdc0333fa751fb8a56e8f492594ba65ab6c89a407f6b18749bd00050da4abd3392e1084248d5168e429f04
-
SSDEEP
6144:gARAmJlnWl9Aneo1xWP9LfeCYzmzo0naG5:gAR9PGenNw9LYzmPaG5
Malware Config
Signatures
Files
-
635c8659bb8ea060a3f33ad8bf8537438077dbc3e451a2aaf1836ddb9d9e50d4.exe windows x86
82d63a3491322573225eeb0f13d88ff6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AllocConsole
SetConsoleTitleA
SetConsoleScreenBufferSize
GetComputerNameA
GetLocalTime
GetCommandLineA
GetCurrentDirectoryA
InterlockedIncrement
InterlockedDecrement
IsProcessorFeaturePresent
GetFileAttributesA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStdHandle
GetStringTypeA
LCMapStringW
LCMapStringA
InitializeCriticalSection
LoadLibraryA
GetTimeZoneInformation
HeapReAlloc
VirtualAlloc
SetFilePointer
SetCurrentDirectoryA
GetFullPathNameA
FlushFileBuffers
ReadFile
MultiByteToWideChar
GetConsoleMode
GetConsoleCP
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
SetConsoleTextAttribute
InterlockedExchange
GetVersion
GetVersionExA
WinExec
GetModuleFileNameA
GetStringTypeW
Sleep
FreeEnvironmentStringsA
WriteFile
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
RaiseException
ExitProcess
GetModuleHandleA
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
FindNextFileA
FindFirstFileA
SetFileAttributesA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetStartupInfoA
GetProcessHeap
HeapAlloc
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
user32
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
DialogBoxParamA
LoadAcceleratorsA
DefWindowProcA
PostQuitMessage
EndDialog
GetCursorPos
SetForegroundWindow
TrackPopupMenu
PostMessageA
GetMenuItemID
RegisterWindowMessageA
LoadStringA
DestroyWindow
LoadMenuA
SendMessageA
ModifyMenuA
AppendMenuA
CreateMenu
SetMenuDefaultItem
DestroyMenu
GetSubMenu
KillTimer
SendDlgItemMessageA
advapi32
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
GetUserNameA
shell32
Shell_NotifyIconA
winmm
timeGetTime
ws2_32
inet_ntoa
htons
socket
select
accept
closesocket
htonl
inet_addr
listen
bind
ioctlsocket
recv
WSACleanup
__WSAFDIsSet
setsockopt
WSAStartup
getpeername
WSAGetLastError
send
Sections
.text Size: 168KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 254KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ