Behavioral task
behavioral1
Sample
35f9b1f1f941bab78d2a563b0c78504ff8eb1dbcb34df1183cea5d718d613b0c.exe
Resource
win7-20231215-en
General
-
Target
35f9b1f1f941bab78d2a563b0c78504ff8eb1dbcb34df1183cea5d718d613b0c
-
Size
1.4MB
-
MD5
d17897436b77bfaa9e255c4e1ea0abd9
-
SHA1
5f733c0a080ae4cb7d3b3ddb0f7b5b8b311a5127
-
SHA256
35f9b1f1f941bab78d2a563b0c78504ff8eb1dbcb34df1183cea5d718d613b0c
-
SHA512
c8f617ebf09b19952001329c4d920843f994a08bac532503524263dddcfe95f75a6c79f28d5e88c2a0f74a02bfe33039d8cc3d0131ff1d3e40ba7520717392ce
-
SSDEEP
24576:nY9ohyqt6ugWFXra41v0N5bhnhRb3Ujm8JzqktTfgi2123+eV7B0mGWSNc:nQxugMBv0N5l7b3Z8Ekt7A254w
Malware Config
Signatures
Files
-
35f9b1f1f941bab78d2a563b0c78504ff8eb1dbcb34df1183cea5d718d613b0c.exe windows:4 windows x86 arch:x86
32c5de998b5f069b26c94c8143b13c06
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
kernel32
GetModuleFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 584KB - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 768KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ