Static task
static1
Behavioral task
behavioral1
Sample
da35f45793beccae30ebe1eb2f10e122ecac7247fbc969a29bd504987c77af1f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
da35f45793beccae30ebe1eb2f10e122ecac7247fbc969a29bd504987c77af1f.exe
Resource
win10v2004-20220812-en
General
-
Target
da35f45793beccae30ebe1eb2f10e122ecac7247fbc969a29bd504987c77af1f
-
Size
45KB
-
MD5
0f64eac4cfde09f417eb2bad4869b03f
-
SHA1
6a69f1eabfb0b825fa910683011ee9def8d853d7
-
SHA256
da35f45793beccae30ebe1eb2f10e122ecac7247fbc969a29bd504987c77af1f
-
SHA512
3465b9a15699ce63447684208b1bba39089ce8e5dbcdbf1c9716b58f1c946a8b81e5bb533a97e8c8c416851ec22c6d6f6f442e8fb952512da64841686b64218b
-
SSDEEP
768:0S6oCaCjjggvHIGTotirnR5AAxfTQLvYCXAsRCcKH19QA2s293F2dGeMAH7:R6LjjVvlFeuTkvxKB3
Malware Config
Signatures
Files
-
da35f45793beccae30ebe1eb2f10e122ecac7247fbc969a29bd504987c77af1f.exe windows x86
8deafe921f2de4db0ed786816febc392
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dataclen
DllGetClassObject
kernel32
TlsFree
TlsSetValue
GetACP
VirtualFree
EnterCriticalSection
IsBadWritePtr
UnhandledExceptionFilter
LeaveCriticalSection
SizeofResource
FreeEnvironmentStringsW
FindResourceA
GetOEMCP
TlsAlloc
LCMapStringW
IsDBCSLeadByte
GetEnvironmentStringsW
LoadLibraryA
InterlockedDecrement
GetCPInfo
HeapReAlloc
GetLastError
SetConsoleCtrlHandler
IsBadReadPtr
DisableThreadLibraryCalls
SetUnhandledExceptionFilter
GetModuleFileNameA
LCMapStringA
GetProcAddress
lstrlenA
lstrcpyA
GetModuleHandleA
HeapAlloc
FreeLibrary
VirtualAlloc
HeapDestroy
IsBadCodePtr
lstrlenW
InterlockedIncrement
LoadResource
FreeEnvironmentStringsA
GetStartupInfoA
SetLastError
GetVersion
HeapFree
InitializeCriticalSection
lstrcpynA
SetHandleCount
lstrcatA
RtlUnwind
GetStringTypeA
GetCommandLineA
WriteFile
GetStringTypeW
MultiByteToWideChar
GetStdHandle
GetShortPathNameA
GetCurrentProcess
GetFileType
TlsGetValue
DeleteCriticalSection
TerminateProcess
GetEnvironmentStrings
GetCurrentThread
ExitProcess
lstrcmpiA
FatalAppExitA
LoadLibraryExA
GetCurrentThreadId
HeapCreate
WideCharToMultiByte
cmdial32
AutoDialFunc
adsnt
DllGetClassObject
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ