Static task
static1
Behavioral task
behavioral1
Sample
35f19e0e2d4400efe1033ffec1879b90.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
35f19e0e2d4400efe1033ffec1879b90.exe
Resource
win10v2004-20240226-en
General
-
Target
35f19e0e2d4400efe1033ffec1879b90
-
Size
149KB
-
MD5
35f19e0e2d4400efe1033ffec1879b90
-
SHA1
7595214be8d0c21177936215ca7bffdccd224401
-
SHA256
53ed70eae82793dc1604734599d19380f03bcaf0633a666aa70fe2d8dd01230a
-
SHA512
b72dff56bdb667ec6c73574d186f62fe683894055251a72c696a84c17d3b34185496cdec93d920136f7470d4efca2e87ecb64ef3a1d03ecaab13ce901b47c13b
-
SSDEEP
3072:WF+OkASuosVEx+aWXAlq5JgjsRMb5aeX5UA7vbv5F4KU4n:WkAE4ExSXyq5Jgjs45a83vTjn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35f19e0e2d4400efe1033ffec1879b90
Files
-
35f19e0e2d4400efe1033ffec1879b90.exe windows:5 windows x86 arch:x86
7bef86cde03967d41c1b85ef2448da80
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
recv
closesocket
WSAStartup
socket
WSACleanup
setsockopt
gethostbyname
inet_ntoa
inet_addr
htons
connect
send
gdi32
DPtoLP
GetStockObject
GdiGradientFill
GetAspectRatioFilterEx
GetMapMode
SetMapMode
LPtoDP
GetDeviceCaps
kernel32
GetStringTypeW
SetEndOfFile
GetStringTypeA
CreateProcessA
CloseHandle
WaitForSingleObject
CreateEventA
MulDiv
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
SetEvent
GetCurrentProcessId
Sleep
GetModuleFileNameA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
ReadFile
GetFileSize
GetProcessHeap
GetModuleHandleA
GetTickCount
GetTempPathA
GetEnvironmentVariableA
CopyFileA
SetFileAttributesA
GetCommandLineA
CreateThread
GetLocaleInfoA
LCMapStringW
LCMapStringA
GetTimeZoneInformation
MultiByteToWideChar
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetCurrentDirectoryA
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
CreateDirectoryA
GetFullPathNameA
SetFilePointer
SetHandleCount
GetSystemTimeAsFileTime
GetLastError
HeapFree
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetModuleHandleW
GetProcAddress
ExitProcess
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetFileType
user32
UpdateWindow
MsgWaitForMultipleObjects
MessageBoxA
LoadCursorA
RegisterClassExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
GetTitleBarInfo
GetDesktopWindow
GetWindowRect
MoveWindow
CreateWindowExA
BeginPaint
EndPaint
DefWindowProcA
SetFocus
InvalidateRect
GetPriorityClipboardFormat
SetWindowTextA
GetWindowDC
CreateIconFromResourceEx
GetUpdateRect
BringWindowToTop
CheckMenuRadioItem
advapi32
RegSetValueExA
RegCloseKey
FindFirstFreeAce
RegOpenKeyA
ole32
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE