Static task
static1
Behavioral task
behavioral1
Sample
35171d5dc6618609723d1b14df14e2917a1661a00b88224aaedb1ed04ddabeba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
35171d5dc6618609723d1b14df14e2917a1661a00b88224aaedb1ed04ddabeba.exe
Resource
win10v2004-20220901-en
General
-
Target
35171d5dc6618609723d1b14df14e2917a1661a00b88224aaedb1ed04ddabeba
-
Size
197KB
-
MD5
0408593c8226c4687a2f71e04f273d10
-
SHA1
51002d7fc6c4803328c571e2da8881071617357a
-
SHA256
35171d5dc6618609723d1b14df14e2917a1661a00b88224aaedb1ed04ddabeba
-
SHA512
570d69c37a660c972369a56d4555e8d69444f4cf44bcf3545924178227ce08ab335836b110c612ff4d6573cd260853c0606d7d855b97c50cf5cf4fbd60eba6fa
-
SSDEEP
3072:ffZw4CSLIccTcFgjFfZdAkZbHFjD9/z9k4HbYCn3IL1BD:Zw4D0ccgF2xdxb5fHbYCn61BD
Malware Config
Signatures
Files
-
35171d5dc6618609723d1b14df14e2917a1661a00b88224aaedb1ed04ddabeba.exe windows x86
c5a74eea1d2e0720cd8987ac84db4534
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CLSIDFromProgIDEx
kernel32
CloseHandle
CreateFileW
GetCurrentProcessId
GetLastError
GetLocalTime
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetTickCount
LoadLibraryA
LocalFree
VirtualProtect
lstrcatA
lstrcpyW
lstrlenW
advapi32
CloseEventLog
OpenEventLogW
ReadEventLogW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
user32
SetFocus
SetWindowPlacement
LoadIconW
gdi32
DeleteDC
DeleteObject
SelectObject
CreateFontIndirectW
Sections
AUTO Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 182KB - Virtual size: 346KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ