Static task
static1
Behavioral task
behavioral1
Sample
35f1ff40e16e20c9674a989c7cbefe1c4e2b91aba78ad4b9c499c4a68a566ede.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
35f1ff40e16e20c9674a989c7cbefe1c4e2b91aba78ad4b9c499c4a68a566ede.exe
Resource
win10v2004-20220901-en
General
-
Target
35f1ff40e16e20c9674a989c7cbefe1c4e2b91aba78ad4b9c499c4a68a566ede
-
Size
41KB
-
MD5
b2d4af95f7531e80d9e19997d4c38d7b
-
SHA1
ba4025a6de3acdaaae1653861967513c86b87b83
-
SHA256
35f1ff40e16e20c9674a989c7cbefe1c4e2b91aba78ad4b9c499c4a68a566ede
-
SHA512
1b3b2df4efa004c5491593bb9025c8f38a013f22fd767fdba0341a0b88d998e7dbb50a2de0d30a0eb49b85e7c6aba3c8f374cfaaaa5558e228709f776a54b123
-
SSDEEP
768:wVDPeqo3Lh+km8BwVFL7CH+de1CWIvD8r14j3pmYN8xymoSQVjw2lgVU:wVD217IN8BiN+H+Yb+D8r14jZmFxymyw
Malware Config
Signatures
Files
-
35f1ff40e16e20c9674a989c7cbefe1c4e2b91aba78ad4b9c499c4a68a566ede.exe windows x86
f48f961824ac6723828aea41bfc37102
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetRasterizerCaps
GetRandomRgn
UpdateICMRegKeyA
ScaleViewportExtEx
GdiSetBatchLimit
GetColorSpace
PlayMetaFile
SetStretchBltMode
LPtoDP
SetArcDirection
GetPixelFormat
GetMiterLimit
RoundRect
StretchDIBits
SetICMMode
GetTextAlign
GetLogColorSpaceA
GdiGetBatchLimit
EnumEnhMetaFile
GetBkMode
GetOutlineTextMetricsA
GetGraphicsMode
CreateScalableFontResourceW
GetStockObject
GetCharABCWidthsW
GetTextCharset
GetObjectType
GetDeviceCaps
ExtCreatePen
GetMapMode
GetSystemPaletteUse
DeleteObject
EndPage
GetCurrentObject
CreateMetaFileW
kernel32
ShowConsoleCursor
CallNamedPipeW
FillConsoleOutputCharacterW
CreateHardLinkA
GetQueuedCompletionStatus
GetPrivateProfileStringA
lstrcmpW
HeapCompact
GetProcessVersion
GetProfileSectionW
GetThreadTimes
TransmitCommChar
ExpandEnvironmentStringsW
Sleep
GetStartupInfoA
GetLastError
GetVersion
GetLargestConsoleWindowSize
GetCommandLineA
EnumResourceNamesW
VirtualFree
GetCurrencyFormatA
FindFirstChangeNotificationA
SetProcessAffinityMask
CreateDirectoryW
VirtualAlloc
SetWaitableTimer
CloseConsoleHandle
GetModuleHandleA
OpenFile
GetPrivateProfileIntW
DosDateTimeToFileTime
SetCommTimeouts
GetDefaultCommConfigW
FindNextFileW
CreatePipe
CreateMutexA
OpenFileMappingW
TlsGetValue
HeapSummary
WriteFileGather
GetTempPathW
ExitProcess
TerminateProcess
GetACP
GetThreadLocale
VerifyConsoleIoHandle
GetSystemTime
SetLastError
SetEndOfFile
GlobalReAlloc
user32
GetCursorInfo
DlgDirSelectExA
DdeCreateStringHandleA
DdeQueryNextServer
DdeAddData
CallMsgFilterW
CreatePopupMenu
EnableMenuItem
AttachThreadInput
EnumDisplaySettingsA
DestroyCaret
msvcrt
_spawnl
_winmajor
difftime
memmove
_expand
_ultoa
_fmode
_wexecle
_cscanf
_commode
strchr
wprintf
_tolower
_wcsnicmp
vswprintf
isxdigit
_wcsicmp
_cprintf
_getdiskfree
fputc
_waccess
_wspawnlp
setbuf
_ltoa
ungetc
_wcsrev
_fsopen
_ismbbprint
_kbhit
_winminor
_lseeki64
_putws
_osver
_cputs
_acmdln
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.oascz Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vugp Size: 6KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 18KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE