Static task
static1
Behavioral task
behavioral1
Sample
35f0dc9b4330624dd9515c67a1d85fc13bc076ee6a55c04879dc45849c1c7be3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
35f0dc9b4330624dd9515c67a1d85fc13bc076ee6a55c04879dc45849c1c7be3.exe
Resource
win10v2004-20221111-en
General
-
Target
35f0dc9b4330624dd9515c67a1d85fc13bc076ee6a55c04879dc45849c1c7be3
-
Size
112KB
-
MD5
25e62527c18543144f39c4c90b4a7790
-
SHA1
c5a809582f71c1787dfceccc49b3b9600911a257
-
SHA256
35f0dc9b4330624dd9515c67a1d85fc13bc076ee6a55c04879dc45849c1c7be3
-
SHA512
acfe54eb4b5a23b360e9b39c7d261afcc1cc2871b0106f5cd459a07b1c65657162fecfa077f81a6558c73efaa1153e4c92802b0cba3ca1482a8b52575e87c61c
-
SSDEEP
1536:jXcJdwDMxK4Xcie1GjfGvZ+xJ0tKKBd2tSqhyHEgNUuK1oHC3:jXcJKgxK4JPrGvZBtlk/SEgqb1oHC3
Malware Config
Signatures
Files
-
35f0dc9b4330624dd9515c67a1d85fc13bc076ee6a55c04879dc45849c1c7be3.exe windows x86
d7984dbffc2068019d3f7838ffba0c5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
DeleteFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetSystemDirectoryA
ExitProcess
CompareStringW
CompareStringA
SetEndOfFile
GetLastError
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
GetDriveTypeA
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
HeapFree
RaiseException
FlushFileBuffers
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
GetFullPathNameA
GetCurrentDirectoryA
HeapReAlloc
HeapSize
ReadFile
GetProcAddress
GetModuleHandleA
CloseHandle
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
LoadLibraryA
SetEnvironmentVariableA
user32
MessageBoxA
shell32
ShellExecuteA
Sections
.text Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE