Static task
static1
Behavioral task
behavioral1
Sample
35c40385625a25bdd92bf05633c27427e8f75d612a21d7c9e9d52f78d1b3ed1c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
35c40385625a25bdd92bf05633c27427e8f75d612a21d7c9e9d52f78d1b3ed1c.exe
Resource
win10v2004-20220812-en
General
-
Target
35c40385625a25bdd92bf05633c27427e8f75d612a21d7c9e9d52f78d1b3ed1c
-
Size
644KB
-
MD5
0e63966478adc00c8bc352c7867dfb80
-
SHA1
266c087ce4a2d0d3f24bea4cdf1338cfbbb9b48b
-
SHA256
35c40385625a25bdd92bf05633c27427e8f75d612a21d7c9e9d52f78d1b3ed1c
-
SHA512
5d6604702da078c3e5d33510d68b5645b5c1564c79db3521b26d36bfcfe7124967f16b5ffbd1a6af2e71a12d40182c17edf664695d607f97c7e4e1396544b469
-
SSDEEP
12288:J18kw5WLgyPWUnnLiYPi+iUBeoEWpudXgHE4bfREbQpf6PbWyXXvhwky:je5W0yTLL8Xd2E4bIlPXKk
Malware Config
Signatures
Files
-
35c40385625a25bdd92bf05633c27427e8f75d612a21d7c9e9d52f78d1b3ed1c.exe windows x86
aacbae805be6be6c20f26b821f4b4c8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindAtomW
GetDriveTypeW
ReadConsoleA
Sleep
GetFileAttributesA
GetStringTypeW
HeapDestroy
lstrlenW
GetStartupInfoA
VirtualProtect
GetLogicalDrives
GetPrivateProfileSectionW
LoadLibraryW
CloseHandle
CopyFileA
SetEvent
ReadConsoleA
AddAtomA
ReadConsoleA
GetLastError
HeapSize
dsprop
ErrMsg
FindSheet
CheckADsError
FindSheet
MsgBox
FindSheet
ReportError
ErrMsg
ErrMsg
CheckADsError
MsgBox
ReportError
MsgBox
mmcndmgr
DllRegisterServer
DllGetClassObject
CreateExecutivePlatform
DllCanUnloadNow
Sections
.text Size: 1024B - Virtual size: 855B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 460KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 639KB - Virtual size: 638KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE