Static task
static1
Behavioral task
behavioral1
Sample
635c8c5084d20aa741a58d6cc622ebe9ff455248dac9ffc59ec1a7d6c8dde316.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
635c8c5084d20aa741a58d6cc622ebe9ff455248dac9ffc59ec1a7d6c8dde316.exe
Resource
win10v2004-20220812-en
General
-
Target
635c8c5084d20aa741a58d6cc622ebe9ff455248dac9ffc59ec1a7d6c8dde316
-
Size
732KB
-
MD5
c9680dfc7c8ade156eda338d02bb61a0
-
SHA1
9a22970e936fe533a461bd415f1074cbd4265cf1
-
SHA256
635c8c5084d20aa741a58d6cc622ebe9ff455248dac9ffc59ec1a7d6c8dde316
-
SHA512
b66ce7dce707e19c488e029c64af0564f1d57a6bfe6fc772343247201eebf860e8d45375f10eaaa6d7053cbf9c0c5bea52b1843d166362ebceb559c9f988f6e0
-
SSDEEP
12288:dKlzFSeYgMnqFRnhWXFb31cPuxvSJ4FoIoVEVEVEVEVEVEVEVoGVEVN:dKlzF9YgM6hWVj3hSJEoIoVEVEVEVEVP
Malware Config
Signatures
Files
-
635c8c5084d20aa741a58d6cc622ebe9ff455248dac9ffc59ec1a7d6c8dde316.exe windows x86
0957cadf465f242ad4e2cef5eac7f971
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysStringLen
SysAllocString
SysFreeString
SysAllocStringLen
kernel32
IsValidCodePage
CreateProcessA
SetStdHandle
InterlockedExchange
GetCurrentThreadId
GetModuleHandleW
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
Sleep
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
FileTimeToLocalFileTime
RemoveDirectoryA
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
FindNextFileW
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
HeapCreate
LCMapStringW
GetLastError
LeaveCriticalSection
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
SizeofResource
GlobalLock
DuplicateHandle
FindNextFileA
CreateFileMappingA
CompareStringA
FindFirstFileA
lstrcmpA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
GetEnvironmentVariableA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
GetVersionExW
FindResourceA
EnterCriticalSection
UnmapViewOfFile
WriteConsoleW
InterlockedIncrement
GetVersion
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetModuleFileNameA
GetVersionExA
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
lstrlenW
TlsGetValue
GetSystemTime
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
SetEvent
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetCommandLineA
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
WideCharToMultiByte
GetTempPathA
GetLocaleInfoW
FreeEnvironmentStringsW
SetErrorMode
ExpandEnvironmentStringsA
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindFirstFileW
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
RtlUnwind
HeapFree
VirtualFree
VirtualAlloc
GetOEMCP
ResetEvent
SetHandleCount
gdi32
GetDeviceCaps
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
user32
EnableMenuItem
GetSysColor
DialogBoxParamA
MessageBoxA
GetDesktopWindow
LoadCursorA
ClientToScreen
GetDlgItem
SetTimer
GetSubMenu
SetWindowLongA
PostMessageA
GetWindowRect
GetSystemMetrics
DefWindowProcA
BeginPaint
GetMessageA
SetFocus
EndPaint
FillRect
CreateWindowExA
GetWindowLongA
SetCursor
IsIconic
GetWindow
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
MoveWindow
SendMessageA
UnregisterClassA
ReleaseDC
GetCursorPos
GetDC
IsWindow
SetWindowPos
PostQuitMessage
SetForegroundWindow
KillTimer
DispatchMessageA
RegisterClassExA
LoadIconA
InvalidateRect
GetClientRect
CallWindowProcA
RegisterClassA
GetFocus
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegDeleteValueW
RegDeleteKeyA
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 668KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE