Static task
static1
Behavioral task
behavioral1
Sample
c35a623e32f9b4e43b3d638c135ba269c4371ca3240859bff255b80143e62308.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c35a623e32f9b4e43b3d638c135ba269c4371ca3240859bff255b80143e62308.exe
Resource
win10v2004-20220812-en
General
-
Target
c35a623e32f9b4e43b3d638c135ba269c4371ca3240859bff255b80143e62308
-
Size
382KB
-
MD5
bbd3606dacf49155bf883227791fa85b
-
SHA1
6ea59dc3479beaadc9ba45e6d1231fa81a311fd7
-
SHA256
c35a623e32f9b4e43b3d638c135ba269c4371ca3240859bff255b80143e62308
-
SHA512
70be18afb667734abbca27033f90286492b7aa4689c87c6d6246e11320a9a6cf84d7f9180f54f65e1056525d6ae650aeef2d812a41703062a44873176091e6c1
-
SSDEEP
6144:Z5RMXrPanRgkr/TbWz6b+vzR1vED0sj+SBl4qA4/qylPzgNbwjZUE79rlnMqOvCy:Z5RM7CRn/Tq2K7R100E++l4qh/qabGbQ
Malware Config
Signatures
Files
-
c35a623e32f9b4e43b3d638c135ba269c4371ca3240859bff255b80143e62308.exe windows x86
cdaf634378e104527c341e8474882cc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
GetCurrentThreadId
LoadLibraryW
GlobalFlags
ReleaseMutex
LocalFree
GetCurrentProcessId
GetLocalTime
CreateEventW
GetPrivateProfileIntW
ResetEvent
lstrlenA
IsBadStringPtrA
GlobalFree
VirtualAllocEx
InitializeCriticalSection
SetEvent
CloseHandle
WriteFile
GetEnvironmentVariableW
user32
GetSysColor
CreateWindowExA
GetCursorInfo
CallWindowProcW
GetSysColor
DrawStateW
DispatchMessageA
GetKeyboardType
GetClassInfoA
GetClientRect
EndDialog
IsWindow
SetFocus
mmcshext
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ