Static task
static1
Behavioral task
behavioral1
Sample
ce35f7404e1707d31ab9951498bc853a3ed58997d9800856deb429b608f8c19c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ce35f7404e1707d31ab9951498bc853a3ed58997d9800856deb429b608f8c19c.exe
Resource
win10v2004-20221111-en
General
-
Target
ce35f7404e1707d31ab9951498bc853a3ed58997d9800856deb429b608f8c19c
-
Size
150KB
-
MD5
27b626e12d687301111d63f0edad3215
-
SHA1
954ac8055685d640a763fad3bb1be214bc0c6b86
-
SHA256
ce35f7404e1707d31ab9951498bc853a3ed58997d9800856deb429b608f8c19c
-
SHA512
ac099ff4d570831a9919a3a0139a9c7c4a565819370afcea247204b4f9086e6b2e475c90e31f4627e58d1f8fa4d3edd2790c7a37c8b3127139f6a1cca45db4e6
-
SSDEEP
3072:EpiFdJXDFfnGzQYPWSylhREnCgrs2Ptv7z0Lm:FDFfnGsee+jssv7z0Lm
Malware Config
Signatures
Files
-
ce35f7404e1707d31ab9951498bc853a3ed58997d9800856deb429b608f8c19c.exe windows x86
ec239c481d635b01b4d2b980b018dacd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
DrawIcon
IsMenu
GetFocus
LoadCursorA
GetMenu
DrawTextA
BlockInput
GetWindowTextLengthA
CalcMenuBar
GetDlgItem
CopyIcon
AppendMenuW
GetWindowTextA
CloseWindow
DialogBoxParamW
InsertMenuA
AppendMenuA
AlignRects
CopyImage
CreateIcon
LoadMenuA
CopyRect
CalcMenuBar
DrawTextA
GetMenu
GetDlgItem
DialogBoxParamW
DrawIcon
GetFocus
IsWindow
InsertMenuA
DrawTextW
DialogBoxParamA
CopyIcon
DrawIconEx
AppendMenuW
kernel32
GetCommandLineA
GetModuleHandleA
GetModuleFileNameA
HeapFree
ExitProcess
GetCurrentThread
lstrcpynA
GetOEMCP
GetCurrentProcessId
GetCurrentThreadId
lstrcmpA
GetLastError
lstrcatA
Sleep
DeleteFileA
GlobalAlloc
GetFileAttributesA
WideCharToMultiByte
DeleteFileA
WideCharToMultiByte
DeleteFileA
GetConsoleOutputCP
DeleteFileA
GetCurrentProcess
DeleteFileA
GetCurrentThread
DeleteFileA
lstrcmpA
DeleteFileA
FreeLibrary
DeleteFileA
GetModuleFileNameA
DeleteFileA
ExitProcess
GlobalFree
Sleep
GetFileType
GetCurrentThreadId
HeapAlloc
GetCommandLineA
lstrcpyA
FreeLibrary
GetCurrentProcessId
GetConsoleOutputCP
ExitProcess
GetFileSize
lstrcatA
GetOEMCP
lstrcmpA
GetLastError
Sections
.taxt Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.raata Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edada Size: 5KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 919B
IMAGE_SCN_MEM_READ
.rarc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ