Static task
static1
Behavioral task
behavioral1
Sample
a35ecb2eb63613b79e565ced1c03a007b8ba3c996183c146ca66b428bcdbad06.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a35ecb2eb63613b79e565ced1c03a007b8ba3c996183c146ca66b428bcdbad06.exe
Resource
win10v2004-20221111-en
General
-
Target
a35ecb2eb63613b79e565ced1c03a007b8ba3c996183c146ca66b428bcdbad06
-
Size
77KB
-
MD5
4c32215ea54b6d121e8204dd3bf12d70
-
SHA1
27ee5632b4302aee34ab8fe5492f9cbfe7c40662
-
SHA256
a35ecb2eb63613b79e565ced1c03a007b8ba3c996183c146ca66b428bcdbad06
-
SHA512
40c7afd4d11941be091c76c8e3c56f6bb7e960ef866a7f0d5428ba014d2b0ce842554c1de094af0a3cb5d46cacec78fdb17d5a5ea2bf721d07737a17e8e2602c
-
SSDEEP
1536:GnHyV7TX2RXCIdr0DT/IlyHUqBD0/THmt/nXf:vV7r2RXJAUeU2aTGt/nXf
Malware Config
Signatures
Files
-
a35ecb2eb63613b79e565ced1c03a007b8ba3c996183c146ca66b428bcdbad06.exe windows x86
543cfb341b82c8e438cbdbae1e6c00cf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
DeleteFileW
GetLastError
GetTimeFormatA
InterlockedExchange
GetVolumeInformationW
SetLastError
ExitProcess
GetCurrentProcessId
GetFileTime
GetDiskFreeSpaceW
FindCloseChangeNotification
FindFirstChangeNotificationW
GetVolumeInformationA
QueryPerformanceCounter
GetSystemTime
GetLocalTime
CreateFileA
GetModuleHandleW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
CreateProcessW
Sleep
GetTickCount
FreeLibrary
LoadLibraryA
GetProcAddress
GetCommandLineA
GetModuleHandleA
GetCurrentThreadId
GetProfileStringW
GetStartupInfoA
ws2_32
WSACloseEvent
WSAConnect
WSACreateEvent
WSAAddressToStringA
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
ole32
OleCreate
CoInitialize
StgCreateDocfile
CoSuspendClassObjects
CoUninitialize
OleSetContainedObject
msvcr71
fopen
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
time
memmove
strchr
atoi
wcslen
exit
fclose
fwrite
fputs
fseek
_acmdln
free
realloc
malloc
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
__p__fmode
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ