Static task
static1
Behavioral task
behavioral1
Sample
35930ec6a1538b2885632efc7675771b40c4333089874ffe3a218ceb0d2fbe09.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
35930ec6a1538b2885632efc7675771b40c4333089874ffe3a218ceb0d2fbe09.exe
Resource
win10v2004-20220812-en
General
-
Target
35930ec6a1538b2885632efc7675771b40c4333089874ffe3a218ceb0d2fbe09
-
Size
378KB
-
MD5
a395ea6b31f0a51576ccba1861f556d0
-
SHA1
b33930d944e482277aad7152fd9823e7302cc9c6
-
SHA256
35930ec6a1538b2885632efc7675771b40c4333089874ffe3a218ceb0d2fbe09
-
SHA512
0861e13048a3082cfe862a2634b6e161014e0ae48906fa8cc4fc149223aa8272ca4010e301f7dc689cd2ab16a7af6bc9a90da3efefb49651914d57bc8ae81b5a
-
SSDEEP
1536:3Qgj4juhZvKClMJ1JEsYn32vgRse3bRDAzIUchihvTN450e:LDjCaMJQsJvg6qWFTN450e
Malware Config
Signatures
Files
-
35930ec6a1538b2885632efc7675771b40c4333089874ffe3a218ceb0d2fbe09.exe windows x86
89b95d9ebc5bd75d05029d1aee2a85e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
DeleteFileA
ExitProcess
FileTimeToDosDateTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
IsDebuggerPresent
LoadLibraryA
VirtualAlloc
VirtualFree
lstrcmpiW
user32
CallWindowProcA
ClientToScreen
EnableWindow
EndDialog
FillRect
GetDC
InvalidateRect
IsWindowVisible
ShowWindow
TrackPopupMenu
gdi32
CreateFontIndirectA
CreateSolidBrush
DeleteDC
GetDIBits
GetTextExtentPoint32A
SetPixel
SetROP2
shell32
CommandLineToArgvW
SHAddToRecentDocs
SHAppBarMessage
SHBindToParent
SHGetFileInfoA
SHGetFileInfoW
SHGetSettings
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
ShellExecuteA
ShellExecuteW
Shell_NotifyIconA
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 332KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE