Static task
static1
Behavioral task
behavioral1
Sample
735a5adabef84d9932e27e58a1db048cae3027b8515c886fc1c1631eed057ca9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
735a5adabef84d9932e27e58a1db048cae3027b8515c886fc1c1631eed057ca9.exe
Resource
win10v2004-20221111-en
General
-
Target
735a5adabef84d9932e27e58a1db048cae3027b8515c886fc1c1631eed057ca9
-
Size
385KB
-
MD5
6eecbd8605b80d12adc74a8102dc0755
-
SHA1
baf2aa136575b60544685b720404c44f5f707307
-
SHA256
735a5adabef84d9932e27e58a1db048cae3027b8515c886fc1c1631eed057ca9
-
SHA512
4c5b9f6dca685c0e0e8865705653345ea1050f4817a14824ab646fbcbf90e8cf533cd6b33a5458b62533e9569a2e9c684ca1959c9f8df23977ffa3cb244a01cd
-
SSDEEP
6144:k/ZTmjPqipSnVKkYFmUzS9n4rPY7AC42KibWKUqi+oAVLXHKVZ/1gdxEx5:3XSVKkY4UmR4rPx9kWKUZ+BXyZ/1p
Malware Config
Signatures
Files
-
735a5adabef84d9932e27e58a1db048cae3027b8515c886fc1c1631eed057ca9.exe windows x86
224afebba0b1f74412dcb58e735303d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
CloseHandle
CreateMutexA
GetModuleHandleW
FindVolumeClose
InterlockedExchange
GetExitCodeProcess
GetACP
GetCommandLineA
ResetEvent
GetDriveTypeW
GetEnvironmentVariableA
GetPrivateProfileIntW
CreateEventA
GlobalSize
lstrlenA
ResumeThread
VirtualAlloc
GlobalFree
WriteFile
user32
CallWindowProcW
GetCursorInfo
GetClientRect
GetKeyboardType
EndDialog
DrawStateW
SetFocus
GetSysColor
DispatchMessageA
CreateWindowExA
IsWindow
GetSysColor
GetClassInfoA
avicap32
videoThunk32
AppCleanup
videoThunk32
videoThunk32
videoThunk32
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 375KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ