Static task
static1
Behavioral task
behavioral1
Sample
35b162a5b2f4bc7325a2c9f0086c7cb7ddf406f96277646b513824da0e965b1a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
35b162a5b2f4bc7325a2c9f0086c7cb7ddf406f96277646b513824da0e965b1a.exe
Resource
win10v2004-20221111-en
General
-
Target
35b162a5b2f4bc7325a2c9f0086c7cb7ddf406f96277646b513824da0e965b1a
-
Size
432KB
-
MD5
d23db4011c9c13b8c0c71c03ed76e52c
-
SHA1
11af86ced1f43a00605df51144c0f71ff84f0144
-
SHA256
35b162a5b2f4bc7325a2c9f0086c7cb7ddf406f96277646b513824da0e965b1a
-
SHA512
d353168a4248074101d1e5d8225a0fd0e0f770206f819d7413a22aae36ec2afa9325152eb7f9d067486360bc093439bbcb2aeb1887923a6d05c8e06084cde542
-
SSDEEP
6144:G08yrDtXiZefUpKerXT8WSMGtoIVrhg178okMKJkjaatEZxye2GA4cf4t:G01iZefs8WSmKo+JaaTZYv4c
Malware Config
Signatures
Files
-
35b162a5b2f4bc7325a2c9f0086c7cb7ddf406f96277646b513824da0e965b1a.exe windows x86
7cc25c399403513d94df629ec438c248
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetIcon
CreatePropertySheetPage
CreateStatusWindow
DestroyPropertySheetPage
ImageList_DragShowNolock
InitMUILanguage
InitCommonControlsEx
ImageList_GetBkColor
_TrackMouseEvent
ImageList_SetDragCursorImage
ImageList_DragEnter
CreateUpDownControl
CreatePropertySheetPageA
ImageList_GetImageRect
user32
ShowWindow
RegisterClassExA
CreateWindowExW
DestroyWindow
VkKeyScanW
TabbedTextOutA
MessageBoxW
DefWindowProcA
RegisterClassA
wininet
FtpRemoveDirectoryA
FtpPutFileW
InternetTimeFromSystemTimeA
GetUrlCacheEntryInfoW
RetrieveUrlCacheEntryFileA
CommitUrlCacheEntryW
FindFirstUrlCacheContainerW
FtpPutFileA
advapi32
RegDeleteKeyA
RegOpenKeyExW
CryptDeriveKey
CryptGetUserKey
CryptEnumProvidersA
comdlg32
GetFileTitleA
ReplaceTextW
ChooseColorW
GetFileTitleW
kernel32
GetCurrentThread
GetModuleFileNameA
GetEnvironmentStrings
SetHandleCount
EnumSystemLocalesA
HeapFree
TerminateProcess
GetLocaleInfoW
GetCommandLineA
LeaveCriticalSection
GetModuleFileNameW
GetCPInfo
TlsSetValue
HeapCreate
GetTimeZoneInformation
VirtualProtect
GetLocaleInfoA
TlsGetValue
lstrcpyA
DeleteCriticalSection
GetCurrentProcessId
IsValidCodePage
CompareStringA
GetStringTypeA
VirtualQuery
HeapDestroy
UnhandledExceptionFilter
EnterCriticalSection
SetEnvironmentVariableA
QueryPerformanceCounter
GetStdHandle
CreateMutexA
GetUserDefaultLCID
LCMapStringW
HeapAlloc
VirtualFree
SetFilePointer
CompareStringW
ExitProcess
GetCommandLineW
RtlUnwind
GetDateFormatA
SetStdHandle
SetLastError
LoadLibraryA
VirtualAlloc
GetModuleHandleA
GetCurrentProcess
TlsAlloc
MultiByteToWideChar
CloseHandle
IsBadWritePtr
GetCurrentThreadId
TlsFree
GetStartupInfoA
WriteFile
InitializeCriticalSection
GetStringTypeW
ReadFile
GetProcAddress
WideCharToMultiByte
InterlockedExchange
GetSystemInfo
GetStartupInfoW
GetTimeFormatA
GetSystemTimeAsFileTime
GetACP
GetVersionExA
GetFileType
HeapSize
GetLastError
OpenMutexA
FreeEnvironmentStringsW
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStringsW
LCMapStringA
GetTickCount
IsValidLocale
HeapReAlloc
GetOEMCP
gdi32
GetRandomRgn
DeleteDC
GetDeviceGammaRamp
GetDeviceCaps
StrokeAndFillPath
SetTextCharacterExtra
PolyBezier
GetObjectW
GetCharABCWidthsA
SetMiterLimit
SetDIBColorTable
GetRasterizerCaps
GetOutlineTextMetricsW
SaveDC
SetGraphicsMode
EnumICMProfilesA
GetEnhMetaFileA
GetROP2
SetWindowExtEx
SetICMProfileW
CreateDCA
DeleteObject
SetTextJustification
SetBitmapDimensionEx
Sections
.text Size: 226KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ