Static task
static1
Behavioral task
behavioral1
Sample
352cf3dccb04e5d6622909aa9252c05654cb36f8f129e15c0b27d06f6484e8e9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
352cf3dccb04e5d6622909aa9252c05654cb36f8f129e15c0b27d06f6484e8e9.exe
Resource
win10v2004-20220812-en
General
-
Target
352cf3dccb04e5d6622909aa9252c05654cb36f8f129e15c0b27d06f6484e8e9
-
Size
187KB
-
MD5
6cab990d7065259c89c10b5ef7198d60
-
SHA1
f6ac1688fe67b317914f07837e3f68db8bfd838d
-
SHA256
352cf3dccb04e5d6622909aa9252c05654cb36f8f129e15c0b27d06f6484e8e9
-
SHA512
be769c0a66c52e98f7dbe0f8f87a6ce298634b4fef10b5589d2c939295cde6c8bf3d5e1a9064eaa8a11e3dcb16fc604a3fb73f31c9d1535ea2498568b2526284
-
SSDEEP
3072:KEolu8GzcDAEGsRrCMojZj/ZrVW5xjm3Q42nQAFZelFOHQ:KEBctsPkxjy72QVOH
Malware Config
Signatures
Files
-
352cf3dccb04e5d6622909aa9252c05654cb36f8f129e15c0b27d06f6484e8e9.exe windows x86
865df307f560ffebd2e29acda46151be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetCurrentProcess
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
FreeLibrary
MultiByteToWideChar
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LoadLibraryA
ExitProcess
gdi32
CombineTransform
Arc
RectVisible
Sections
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ