Static task
static1
Behavioral task
behavioral1
Sample
d35eb5a7fdc96962e4eef93634380c2b27df6ef64291123d602c745bcac8089b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d35eb5a7fdc96962e4eef93634380c2b27df6ef64291123d602c745bcac8089b.exe
Resource
win10v2004-20221111-en
General
-
Target
d35eb5a7fdc96962e4eef93634380c2b27df6ef64291123d602c745bcac8089b
-
Size
1.2MB
-
MD5
bdc0768848f9c0f0e982d1aa1b7a5c00
-
SHA1
b0ba4dddabaf444d0eea57094df5c289504c2f20
-
SHA256
d35eb5a7fdc96962e4eef93634380c2b27df6ef64291123d602c745bcac8089b
-
SHA512
0326d09f4e9f36c959f13a86b17e6ddd6b1305cbba54689b6f5cf84b84a8ab72f370abbeba9069c645665c43b382a4a1d9dc0cdd235df2ed09b8c57f5a31a6b2
-
SSDEEP
24576:aUMcOCwnb3dtfmZVRLzcFUGqgqfDVlpd4LtPA8wmTzs4qByt7cNItPrDOPx3N5:aUN6b3dtfMzcFUGqgqG5cNItPrDOPRD
Malware Config
Signatures
Files
-
d35eb5a7fdc96962e4eef93634380c2b27df6ef64291123d602c745bcac8089b.exe windows x86
deb82cc024c128a3bc2e3f40abef1ce5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
winmm
timeBeginPeriod
kernel32
VirtualAlloc
VirtualFree
CloseHandle
CreateEventA
CreateThread
CreateWaitableTimerA
DuplicateHandle
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcAddress
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
LoadLibraryW
ResumeThread
SetConsoleCtrlHandler
SetEvent
SetThreadPriority
SetWaitableTimer
Sleep
SuspendThread
WaitForSingleObject
WriteFile
Sections
.text Size: 869KB - Virtual size: 868KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 204B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/18 Size: 60KB - Virtual size: 59KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/30 Size: 37KB - Virtual size: 36KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/43 Size: 142KB - Virtual size: 141KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/55 Size: 47KB - Virtual size: 47KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/71 Size: 9KB - Virtual size: 9KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/87 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/102 Size: 512B - Virtual size: 91B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 512B - Virtual size: 193B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ