Static task
static1
Behavioral task
behavioral1
Sample
da35943676e8776247361b1b12068d359dddf7fa257ba324a8beca75170c6275.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
da35943676e8776247361b1b12068d359dddf7fa257ba324a8beca75170c6275.exe
Resource
win10v2004-20220812-en
General
-
Target
da35943676e8776247361b1b12068d359dddf7fa257ba324a8beca75170c6275
-
Size
855KB
-
MD5
07a2e72efd9b824b169df5ab20b053ac
-
SHA1
128f9b1de21a9cf66c80f83b4b6919e0df5f5240
-
SHA256
da35943676e8776247361b1b12068d359dddf7fa257ba324a8beca75170c6275
-
SHA512
53bdea25e9ef2ec2dfa926a42d22abc340a1da5444ef711cb8a98ec50fdf6a378eeba8ce6fbde444e56c787c045a2d717631c6933bb1ced317661fb1ef2d3ac5
-
SSDEEP
24576:c/tYlklifwIwuHaZClT1b6qP7N1JC1x8/NFGxJ7WgJ:StVlAwZuHau1b6Gg1u1FIJ
Malware Config
Signatures
Files
-
da35943676e8776247361b1b12068d359dddf7fa257ba324a8beca75170c6275.exe windows x86
eb82cb71064d93c3e050d45b4cf0036d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCommandLineA
GetCurrentThread
GetLastError
GetCurrentProcessId
GetVersion
GetTickCount
GetModuleHandleA
ExitProcess
HeapAlloc
GetProcessHeap
InterlockedIncrement
Sleep
InterlockedDecrement
FindClose
VirtualFree
LoadResource
InitializeCriticalSection
WriteConsoleA
GetACP
FindNextFileA
GetSystemTimeAsFileTime
CloseHandle
GetCurrentProcess
InterlockedExchange
SetFilePointer
GetStringTypeA
GetProcAddress
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
LockResource
GetConsoleMode
GetEnvironmentStrings
GetStartupInfoA
FreeEnvironmentStringsA
GetModuleFileNameA
GetVersionExA
TlsAlloc
LCMapStringA
WaitForSingleObject
LoadLibraryW
HeapCreate
GetStdHandle
HeapFree
user32
SetForegroundWindow
LoadCursorA
CreateWindowExA
ClientToScreen
GetDlgItem
DestroyWindow
IsWindowVisible
ReleaseDC
GetKeyState
GetDC
TranslateMessage
PostMessageA
ShowWindow
PostQuitMessage
SystemParametersInfoA
GetMessageA
SetFocus
Sections
.text Size: 825KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ