Static task
static1
Behavioral task
behavioral1
Sample
3505b429774620bffa85993478347e60589b048d5641404359f566931c1824c1.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3505b429774620bffa85993478347e60589b048d5641404359f566931c1824c1.exe
Resource
win10-20230220-en
General
-
Target
3505b429774620bffa85993478347e60589b048d5641404359f566931c1824c1
-
Size
6.0MB
-
MD5
bc65ec3faed25636ff149fcf1850855e
-
SHA1
468ac57e84fcd934948dab935cfa3c196f23284a
-
SHA256
3505b429774620bffa85993478347e60589b048d5641404359f566931c1824c1
-
SHA512
9f4633330c4b35ae4f28ec7d914c90531ff35f985b1dfc9a2fd718d7b6788d55be3e39b86e6ba15703a50ea0c3ede2d1345c0553c5235b7af329d155e565cfa8
-
SSDEEP
98304:FqSzFI+pzz3U/Yx2cpB/jn99IVaKrH8AuwWT3hRA6oO3w91d4+PfqaPtiLYEl8+T:FVi+d3U/4jzIVa48fwWTL7oO30d/3qMC
Malware Config
Signatures
Files
-
3505b429774620bffa85993478347e60589b048d5641404359f566931c1824c1.exe windows x86
546b9a4103a2201fcaf023a64f90e71f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
EmptyClipboard
CharUpperBuffW
advapi32
RegSetValueExA
shell32
ShellExecuteA
wininet
InternetCloseHandle
Sections
.text Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yMF Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.t#H Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jP& Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 380KB - Virtual size: 383KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ