Static task
static1
Behavioral task
behavioral1
Sample
35b76cbf76b321780c38c4afa77ed7a7e06455d9947a8285fdbf8a637beef189.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
35b76cbf76b321780c38c4afa77ed7a7e06455d9947a8285fdbf8a637beef189.exe
Resource
win10v2004-20220812-en
General
-
Target
35b76cbf76b321780c38c4afa77ed7a7e06455d9947a8285fdbf8a637beef189
-
Size
747KB
-
MD5
93ab60f0bb2ff333aba476b3f85930d4
-
SHA1
6871b75a72a45a94f40c84c8fa782e07aa57429c
-
SHA256
35b76cbf76b321780c38c4afa77ed7a7e06455d9947a8285fdbf8a637beef189
-
SHA512
d7c41f1b15e505b1983ec7599856a021e6a1015d20fe52a90f33b6f6694bf523407922e0b5c0aec64e27943d52e8effaf2ad6f4a6e2a9c9d596161351533823d
-
SSDEEP
12288:DAoDQwlaoMjqKAbpUM5SLKXiL/TU9ueiy56/u6NhgHx+665str+Qh+pXJP:c5aMgb5KTUubuogU5sYQ6Z
Malware Config
Signatures
Files
-
35b76cbf76b321780c38c4afa77ed7a7e06455d9947a8285fdbf8a637beef189.exe windows x86
3e6c1ba8ef126dfd3e7a449808f5f1ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
ClearCommBreak
GetCommandLineA
AddAtomA
FindClose
FatalExit
HeapCreate
CreateDirectoryA
HeapFree
FindAtomA
GetDriveTypeW
WriteFile
CloseHandle
GetCurrentDirectoryW
RemoveDirectoryA
WaitForMultipleObjects
CreateSemaphoreA
RemoveDirectoryA
GetCurrentThreadId
SetVolumeLabelA
GetFileType
CreatePipe
DeleteAtom
GetModuleHandleA
GetModuleFileNameA
cryptui
DllUnregisterServer
LocalEnroll
LocalEnrollNoDS
CryptUIDlgViewContext
CryptUIWizImport
CryptUIStartCertMgr
WizardFree
CryptUIWizExport
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
DllRegisterServer
WizardFree
CryptUIWizDigitalSign
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE