Static task
static1
Behavioral task
behavioral1
Sample
835fdbb4bffe47ff1ed91055dab1714440181790facab34f72377f33a7ff243b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
835fdbb4bffe47ff1ed91055dab1714440181790facab34f72377f33a7ff243b.exe
Resource
win10v2004-20221111-en
General
-
Target
835fdbb4bffe47ff1ed91055dab1714440181790facab34f72377f33a7ff243b
-
Size
773KB
-
MD5
deb6e60278c65bb468be19f7fa044112
-
SHA1
398f36c25f25ce793387b656b513d3adb01c951a
-
SHA256
835fdbb4bffe47ff1ed91055dab1714440181790facab34f72377f33a7ff243b
-
SHA512
25a0535de7fbb50fab47fb32bc1ee3c7b5eab086b12384eca5c7bcfab8c2fdaf4be9b7749a6020190d1222a9a805d98e236546e5b480bfaebdfb777524440ae9
-
SSDEEP
12288:qISF9xHFfOq46Id1pPE3fBO45klVO0T73+NnXIDmHp1Z23gItwmdPN1Dei1CH:kz9RO2IWfBO4ul1uNnL/ZlgzdF1I
Malware Config
Signatures
Files
-
835fdbb4bffe47ff1ed91055dab1714440181790facab34f72377f33a7ff243b.exe windows x86
8fa5ee4b435bb6d86a9284ad3f2a91e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
TlsGetValue
GetCommandLineA
GetCommandLineA
GetModuleHandleA
HeapDestroy
VirtualQuery
Sleep
CloseHandle
ResetEvent
HeapCreate
lstrlenW
SetEvent
DeleteFileW
CloseHandle
GetModuleFileNameW
GetTimeFormatA
GetStartupInfoA
CreateEventA
OpenMutexW
user32
FindWindowA
IsWindow
PeekMessageA
IsZoomed
GetWindowLongA
GetClassInfoA
GetSysColor
DestroyMenu
DrawTextW
CallWindowProcW
CreateIcon
DispatchMessageA
DispatchMessageA
ntlanman
NPOpenEnum
NPOpenEnum
NPOpenEnum
NPOpenEnum
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 763KB - Virtual size: 763KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ