Static task
static1
Behavioral task
behavioral1
Sample
435af13c568030ef00a02c39340cb5aeaa6c0f67da14235f5d349ecdbb266e37.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
435af13c568030ef00a02c39340cb5aeaa6c0f67da14235f5d349ecdbb266e37.exe
Resource
win10v2004-20220812-en
General
-
Target
435af13c568030ef00a02c39340cb5aeaa6c0f67da14235f5d349ecdbb266e37
-
Size
136KB
-
MD5
90b3cb4f52a9d23772ed17cd8b127a30
-
SHA1
802e7e7f4adce45ba7cd4510c25b31cd91cb6baf
-
SHA256
435af13c568030ef00a02c39340cb5aeaa6c0f67da14235f5d349ecdbb266e37
-
SHA512
c44d50e774fd1fa39b6913218356a04edf6809ba16ef9c14dbb51b0734008b60d36ab1386a76a8baa28355c4eb52fa6db37a8c8af8e6c34013316f4974daf03d
-
SSDEEP
3072:zPxCM0VL+8mAdNvC7VYpz6zyholqhoUb:jxtaYAdJChW0yyRU
Malware Config
Signatures
Files
-
435af13c568030ef00a02c39340cb5aeaa6c0f67da14235f5d349ecdbb266e37.exe windows x86
417341abaf59a14aaba8bacf343cadfb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InsertMenuA
PostMessageA
CreateWindowExW
SetFocus
wsprintfW
OemToCharA
EndDialog
EnumDesktopsA
FindWindowW
DrawStateW
GetPropA
MessageBoxA
LoadCursorA
kernel32
CompareStringW
CreateSemaphoreW
CreateDirectoryW
GetCommandLineW
GetLogicalDriveStringsA
CopyFileA
GetFileSize
GetModuleHandleA
GetStringTypeA
ReadFile
HeapFree
GetCurrentDirectoryA
TlsGetValue
GetCurrentProcess
WaitForSingleObject
GetProcAddress
SearchPathW
certcli
CADeleteCA
CACloseCA
CAEnumFirstCA
CAEnumNextCA
CACloseCertType
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ