Static task
static1
Behavioral task
behavioral1
Sample
535a04f4fd543df81eb04a261980a2eae46417f59d8db578a20b076a19aa4dd4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
535a04f4fd543df81eb04a261980a2eae46417f59d8db578a20b076a19aa4dd4.exe
Resource
win10v2004-20221111-en
General
-
Target
535a04f4fd543df81eb04a261980a2eae46417f59d8db578a20b076a19aa4dd4
-
Size
352KB
-
MD5
699d0ffc99bb8a725da487a23c57917b
-
SHA1
7090b81bfa5f69be2a10a44cf9a64a4e328d8013
-
SHA256
535a04f4fd543df81eb04a261980a2eae46417f59d8db578a20b076a19aa4dd4
-
SHA512
3dc4d6652f73b7a11f80557bcbc5268a1f281b4a681583407bb69605bc42b0dac3b414ccd0fe6fe7b6259e226b37dea81c4080586d0ee932e337943c95a44430
-
SSDEEP
6144:EYbKyi/nqaduknBCmhx3TSEproLqgozey9WS8/td/rzNd:EIK+3WBCmhdTSQroWnLWS8/D/v
Malware Config
Signatures
Files
-
535a04f4fd543df81eb04a261980a2eae46417f59d8db578a20b076a19aa4dd4.exe windows x86
9b191cac3cc9d5602f37f647c2f596a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
LoadLibraryW
GlobalUnlock
LocalFree
HeapCreate
GetModuleHandleA
lstrlenA
PulseEvent
GetCommandLineW
ResetEvent
CreateFileW
CloseHandle
CreateThread
GetComputerNameA
lstrcatA
GetCurrentDirectoryA
FindClose
UnmapViewOfFile
Sleep
GetTickCount
user32
SetFocus
GetKeyState
DrawEdge
CreateWindowExA
CallWindowProcA
IsWindow
GetScrollBarInfo
DrawMenuBar
DispatchMessageA
GetDlgItem
GetDC
FillRect
CheckRadioButton
clbcatq
SetSetupOpen
SetupOpen
DowngradeAPL
CheckMemoryGates
UpdateFromAppChange
timedate.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ