Static task
static1
Behavioral task
behavioral1
Sample
359e24845e4acb271dbb6014aced36b3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
359e24845e4acb271dbb6014aced36b3.exe
Resource
win10v2004-20221111-en
General
-
Target
359e24845e4acb271dbb6014aced36b3.exe
-
Size
7.6MB
-
MD5
359e24845e4acb271dbb6014aced36b3
-
SHA1
5ba8b36866b3f852ab4a7eed63891f9b291430fe
-
SHA256
38bc4b2c42165431e09e969e3a346d249c1c10639a29fba6748ed14358748b78
-
SHA512
09398a9c384cf939a25d901dfbe17249439e84b42877d1f9a903ae6e13dbaebd4b8dc2019ed665c02013db4626418ceebbb60f6c70767ccffb1afc6d858ad13b
-
SSDEEP
196608:tHuWcfdLFB8M9htsKyvl7jhcb0/Q2AzXCrgjuynLaud:tHuDxCyhqKyJo2AzMgjuyn2u
Malware Config
Signatures
Files
-
359e24845e4acb271dbb6014aced36b3.exe.exe windows x86
866fd95aa7f16b723d9c3ead1bfe5865
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
&^W&^O%M Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
THE^RB^I Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
&DM%$R(E Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
NOK$YC&& Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BGG(EN^N Size: 7.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
$SOHK$#W Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
&G^GL&NV Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ