Static task
static1
Behavioral task
behavioral1
Sample
b35aa75a5bbe8f64b6dbb9b7565e3afd2c10a21054fd8258f20d4473344d537f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b35aa75a5bbe8f64b6dbb9b7565e3afd2c10a21054fd8258f20d4473344d537f.exe
Resource
win10v2004-20220812-en
General
-
Target
b35aa75a5bbe8f64b6dbb9b7565e3afd2c10a21054fd8258f20d4473344d537f
-
Size
212KB
-
MD5
09494f4e6dc1a91eedf4d8d313c45376
-
SHA1
92d2f53c730f8effe2787ff0b3b2ed44f6c8255c
-
SHA256
b35aa75a5bbe8f64b6dbb9b7565e3afd2c10a21054fd8258f20d4473344d537f
-
SHA512
0b9ecae22ec0371e58639c0e4eb960186ebf989c7aafbdfb81efff42d78c66786d23ac6a22ca2841c5ab451de0698233e69581c6ab0f7c7b7aeb57a7defb7101
-
SSDEEP
6144:yLr4i7xFSO3bb18PWcsB8CqHpHavgsciE8O5:yLB7DfZb8zJHavdcKe
Malware Config
Signatures
Files
-
b35aa75a5bbe8f64b6dbb9b7565e3afd2c10a21054fd8258f20d4473344d537f.exe windows x86
fe05100d3f49df966f30ae0f34577603
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
GetProcAddress
LoadLibraryA
GetLocaleInfoA
GetModuleHandleA
FindFirstFileW
ReadConsoleA
LCMapStringA
SetThreadAffinityMask
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetCPInfo
HeapFree
HeapAlloc
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
ExitProcess
GetStringTypeA
GetLastError
GetStringTypeW
WriteFile
TerminateProcess
GetCurrentProcess
GetCurrentProcessId
GetFileAttributesA
CloseHandle
GetFileType
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
VirtualAlloc
HeapReAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
VirtualQuery
FlushFileBuffers
GetACP
GetOEMCP
SetStdHandle
RtlUnwind
InterlockedExchange
GetLocaleInfoW
HeapSize
user32
GetMenuCheckMarkDimensions
LoadMenuW
GetScrollRange
gdi32
SetArcDirection
SetBkMode
GetCharABCWidthsW
GetGraphicsMode
OffsetWindowOrgEx
GetOutlineTextMetricsW
CreateCompatibleBitmap
SetTextColor
CreateScalableFontResourceA
AbortDoc
CreateRectRgnIndirect
SetWinMetaFileBits
DeviceCapabilitiesExW
EnumFontFamiliesA
EndFormPage
SetDIBColorTable
SelectFontLocal
AnimatePalette
CreateDIBPatternBrushPt
GetDeviceCaps
GetDCOrgEx
CreateEllipticRgn
GetTextAlign
GetBitmapBits
ExtEscape
AddFontResourceA
GetTextExtentPointA
EnumFontFamiliesW
SetTextCharacterExtra
DescribePixelFormat
GetEnhMetaFilePaletteEntries
GetWinMetaFileBits
RestoreDC
TranslateCharsetInfo
ColorMatchToTarget
GetCurrentPositionEx
ModifyWorldTransform
ScaleWindowExtEx
GetObjectA
GetWorldTransform
PathToRegion
ResizePalette
SetWorldTransform
CreateScalableFontResourceW
GetTextExtentPoint32W
PolyPolyline
GetEnhMetaFileA
GetROP2
ArcTo
GetGlyphOutlineW
TextOutW
CreatePen
GetMetaFileW
Sections
.text Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE