Static task
static1
Behavioral task
behavioral1
Sample
61d06bf851691930e040bb472f567fa64a973936bd43fe325096e33b4bc48334.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
61d06bf851691930e040bb472f567fa64a973936bd43fe325096e33b4bc48334.exe
Resource
win10v2004-20220721-en
General
-
Target
61d06bf851691930e040bb472f567fa64a973936bd43fe325096e33b4bc48334
-
Size
139KB
-
MD5
59716c29133bdaf34175ab183a1a7e3c
-
SHA1
e265094493c86a5a5a2596563cb9c47c592ec599
-
SHA256
61d06bf851691930e040bb472f567fa64a973936bd43fe325096e33b4bc48334
-
SHA512
68b05b8a8ca0c40a395de19ed8792c59641155f69e0a9704505a016872de88c5c7f6784f54b0740f0ffb3668bcf85bb263cfc59f7dcdcc50c73444a18976b3eb
-
SSDEEP
3072:4OCq8KvOb/2LZWnit/FcTDLrvX5kSFvuKgZBDJ3MHgDLblbPadlR:4OCqpvOb/6snit/0DLzX5kwvwZB+sbRu
Malware Config
Signatures
Files
-
61d06bf851691930e040bb472f567fa64a973936bd43fe325096e33b4bc48334.exe windows x86
987ec4575403498712c7fe95313113ad
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
resutils
ResUtilGetBinaryValue
ClusWorkerStart
ResUtilDupString
ClusWorkerTerminate
cfgmgr32
CM_Add_Empty_Log_Conf
CMP_Report_LogOn
CMP_Init_Detection
CM_Add_Range
advapi32
ReadEventLogA
RegUnLoadKeyW
RegRestoreKeyW
RegCreateKeyExW
RegLoadKeyW
OpenEventLogA
RegOpenKeyA
RegSaveKeyA
LogonUserA
RegEnumKeyA
RegDeleteValueW
kernel32
LeaveCriticalSection
LoadLibraryExA
CreateFileA
OpenFileMappingW
lstrcpy
GetDateFormatW
GetCommandLineA
GetModuleHandleA
GetEnvironmentVariableW
GetCurrentThread
WaitForSingleObject
lstrcmp
CreateMutexA
CreateMailslotA
GetProcAddress
GetSystemDirectoryA
user32
LoadMenuW
GetDlgItemTextW
GetPropA
DrawStateA
LoadBitmapW
SetFocus
CharToOemA
FindWindowW
InsertMenuW
LoadCursorA
wsprintfW
DialogBoxParamW
IsCharLowerA
CreateWindowExA
PeekMessageA
comsvcs
RecycleSurrogate
SafeRef
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 673B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ