Static task
static1
Behavioral task
behavioral1
Sample
2935a8116bd6e4ed49746a06bb9480ddcbbd2bdfdc2ea887771dc604fb803fb8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2935a8116bd6e4ed49746a06bb9480ddcbbd2bdfdc2ea887771dc604fb803fb8.exe
Resource
win10v2004-20220812-en
General
-
Target
2935a8116bd6e4ed49746a06bb9480ddcbbd2bdfdc2ea887771dc604fb803fb8
-
Size
218KB
-
MD5
0e7ae4ad7ecd5b9afecc9e9e4d315887
-
SHA1
0f18b10335af6e19543400b62b333db905629157
-
SHA256
2935a8116bd6e4ed49746a06bb9480ddcbbd2bdfdc2ea887771dc604fb803fb8
-
SHA512
506d721e5e5e8005bacb798a54d6b6218d28e6017a7e09913f6a90cfcb6b7df992e5b89429b7e76bd2ac1d41a4c613bccd9f0343b7541fa10b4d2b2449ef945f
-
SSDEEP
6144:xtSzDVZ9mKejIZ2vICqOK1RurBMwZSJ3Y/LqDgyKkiuPR4K0ntzWEN:xgl+Ke0xBPAnq7KKZV0tzWE
Malware Config
Signatures
Files
-
2935a8116bd6e4ed49746a06bb9480ddcbbd2bdfdc2ea887771dc604fb803fb8.exe windows x86
10ec2e2888449106b79c058347dff8bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsCharAlphaW
EnumChildWindows
MoveWindow
SetWindowTextA
IsCharLowerA
GetDesktopWindow
DialogBoxParamA
SetWindowLongW
GetActiveWindow
ole32
CoRevokeClassObject
CoEnableCallCancellation
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
kernel32
GetStartupInfoA
GetTickCount
HeapDestroy
HeapFree
SizeofResource
SetFileAttributesA
GetTimeZoneInformation
LocalAlloc
SuspendThread
LoadResource
FindResourceExA
GetDateFormatA
LoadLibraryA
FreeLibrary
GetProcAddress
DeleteCriticalSection
InitializeCriticalSection
LocalFree
IsBadStringPtrW
HeapCreate
Sections
.text Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ