Static task
static1
Behavioral task
behavioral1
Sample
35bfa76a03d5205c61869e50df17ce14f4f114c0911a85423d2d3a520c7c93cb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
35bfa76a03d5205c61869e50df17ce14f4f114c0911a85423d2d3a520c7c93cb.exe
Resource
win10v2004-20220901-en
General
-
Target
35bfa76a03d5205c61869e50df17ce14f4f114c0911a85423d2d3a520c7c93cb
-
Size
56KB
-
MD5
0285ffcd475b8807ea3c536bdb80801c
-
SHA1
616aafcb499b79a5f0d33c175929432e239697ee
-
SHA256
35bfa76a03d5205c61869e50df17ce14f4f114c0911a85423d2d3a520c7c93cb
-
SHA512
2f28ba362a4449b714b653deffb818e01716637f15c84fc5d292aaed648ff7a72430b262d08ee52b301959cc0399754c158524a8d6895bd721d1b0f8f8973be8
-
SSDEEP
768:gg93iy32tOXAslFzGkX9qIw9CU1DiyHb3ObeyEzoja6v28gCH:/iy3BAgR/X9KCUVi63OvEzx6u0H
Malware Config
Signatures
Files
-
35bfa76a03d5205c61869e50df17ce14f4f114c0911a85423d2d3a520c7c93cb.exe windows x86
fe07e7ff8523ff260f4938e304aebe71
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
CreateFileA
MoveFileExA
GetTickCount
WriteFile
GetSystemDirectoryA
lstrcatA
lstrcmpiA
GetProcAddress
LoadLibraryA
MoveFileA
GetModuleFileNameA
WinExec
CloseHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent
user32
CopyIcon
LoadCursorA
SetSystemCursor
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.mrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE