Static task
static1
Behavioral task
behavioral1
Sample
35d63bc1882aab2625d7a936a08213183c9d109913ec9dd167f749c156706dc0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
35d63bc1882aab2625d7a936a08213183c9d109913ec9dd167f749c156706dc0.exe
Resource
win10v2004-20220812-en
General
-
Target
35d63bc1882aab2625d7a936a08213183c9d109913ec9dd167f749c156706dc0
-
Size
14KB
-
MD5
d43b1f3e207e8ef03ec7704437f6c496
-
SHA1
28478c40b196392b5fb2839c9123c124baf4e74c
-
SHA256
35d63bc1882aab2625d7a936a08213183c9d109913ec9dd167f749c156706dc0
-
SHA512
54a2f500f75115e294b4271b17aaa7a22c7e4cd8b0bd228028ed23370a9094c8a01b66de54b061265184b3a0cadb91f61f3f40fd507f05b08e6217deaa6d93f2
-
SSDEEP
192:0pF+V1D6Ps1xp+Eg/f99hX1rq8YU/pYk6tqod6z1R:oF+zDws9+ZdrqAYkUqg8R
Malware Config
Signatures
Files
-
35d63bc1882aab2625d7a936a08213183c9d109913ec9dd167f749c156706dc0.exe windows x86
9eba862f82afd8db96ba29086b6e96ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
wininet
HttpQueryInfoA
InternetOpenA
InternetOpenUrlA
InternetReadFile
advapi32
RegOpenKeyExA
RegQueryValueExA
kernel32
CloseHandle
CreateFileMappingA
CreateProcessA
CreateThread
ExitProcess
FindResourceA
FormatMessageA
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetTempPathA
HeapFree
LoadLibraryA
LoadResource
LockResource
MapViewOfFile
OpenProcess
SizeofResource
Sleep
UnmapViewOfFile
WaitForSingleObject
_lclose
_lcreat
_lwrite
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
comctl32
InitCommonControls
user32
DialogBoxParamA
EndDialog
GetDlgItem
LoadStringA
MessageBeep
MessageBoxA
PostMessageA
SendDlgItemMessageA
SetDlgItemTextA
SetForegroundWindow
SetWindowTextA
ShowWindow
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ