Static task
static1
Behavioral task
behavioral1
Sample
35697dac729560ac9c45f5affb6187094f8254ceec85cc8417c31991e1f0e260.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
35697dac729560ac9c45f5affb6187094f8254ceec85cc8417c31991e1f0e260.exe
Resource
win10v2004-20220812-en
General
-
Target
35697dac729560ac9c45f5affb6187094f8254ceec85cc8417c31991e1f0e260
-
Size
265KB
-
MD5
7199db96727b9c7db41fff89f31bfa40
-
SHA1
5ae1e15e3f922c026ffaa765a96b88a93f67b253
-
SHA256
35697dac729560ac9c45f5affb6187094f8254ceec85cc8417c31991e1f0e260
-
SHA512
add33d859c33f00d2f05e2d680877c6b0ce0808678089881ba6c52e95ac8acd8fde9fbbc2c2e958732a94396737af6375fe2451960f65819b262fc9fe4bee6cc
-
SSDEEP
6144:YiTEYc2bHPxYZu2p5bQN9sRL1XMqoTjy8u+grgGzQd0vZ04jc2:YiTPPWbQfAZXQjZeTc2Z75
Malware Config
Signatures
Files
-
35697dac729560ac9c45f5affb6187094f8254ceec85cc8417c31991e1f0e260.exe windows x86
c12d93755bd6911c5305b12abeee2bcf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetModuleHandleA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
advapi32
RegSetValueExA
shell32
CommandLineToArgvW
msvcrt
free
ws2_32
__WSAFDIsSet
netapi32
NetUserGetInfo
wininet
InternetOpenUrlA
iphlpapi
GetAdaptersInfo
user32
MessageBoxA
Sections
.text Size: - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc0 Size: - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.rsrc1 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE