Static task
static1
Behavioral task
behavioral1
Sample
35120347366bccffeb637ddf970a7defa372fd878522a7d7d66123f8db97c18d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
35120347366bccffeb637ddf970a7defa372fd878522a7d7d66123f8db97c18d.exe
Resource
win10v2004-20221111-en
General
-
Target
35120347366bccffeb637ddf970a7defa372fd878522a7d7d66123f8db97c18d
-
Size
419KB
-
MD5
5a52e0c52965544f1295c62b9ca8cf48
-
SHA1
cbcbea1e275a9484bf868fa3cfb235f02dbc556f
-
SHA256
35120347366bccffeb637ddf970a7defa372fd878522a7d7d66123f8db97c18d
-
SHA512
27a07c6b37018b47357243eda94e8c0f3b202aff5147ff4489d398a4411bb5ab6af0ac7be2e23d9f4261e9f029c3e236684cc5df97c6b3e0b1a09a889f14376c
-
SSDEEP
6144:qEZcvlap41Fd4pZiK+v/S3lB67Lz2lVDBsJdNl3kLHWiJo/Vtyf40TNbUmslLUJR:aCXSAYu5BsJd3AIk40TNbUP2UU
Malware Config
Signatures
Files
-
35120347366bccffeb637ddf970a7defa372fd878522a7d7d66123f8db97c18d.exe windows x86
8c779ea8acb8e8db1ac1d8ba4f18f85f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CloseWindow
IsCharAlphaA
CreateAcceleratorTableA
kernel32
GetCompressedFileSizeA
GetCurrentThread
ReadFileScatter
DeleteCriticalSection
CancelWaitableTimer
SetCommTimeouts
LeaveCriticalSection
FillConsoleOutputAttribute
SetConsoleMode
GetDiskFreeSpaceA
GenerateConsoleCtrlEvent
GlobalAddAtomA
GetACP
CreateNamedPipeA
GlobalFindAtomA
GetSystemInfo
ScrollConsoleScreenBufferW
WriteTapemark
IsBadReadPtr
SetFileTime
FileTimeToLocalFileTime
WritePrivateProfileSectionA
GetWindowsDirectoryW
ClearCommBreak
GetTempFileNameW
LoadLibraryA
SetPriorityClass
GlobalGetAtomNameA
QueueUserAPC
WritePrivateProfileStringA
MoveFileW
GlobalFindAtomW
CreatePipe
GetStringTypeW
IsDebuggerPresent
ReadConsoleA
GetPrivateProfileSectionW
SetupComm
GetEnvironmentStringsW
SetEndOfFile
VirtualFree
Sections
.text Size: 36KB - Virtual size: 345KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 369KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ