Static task
static1
Behavioral task
behavioral1
Sample
61e663fead542294c652bb525e396cc486de382e89434a2dd51c08bb25e02961.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
61e663fead542294c652bb525e396cc486de382e89434a2dd51c08bb25e02961.exe
Resource
win10v2004-20220812-en
General
-
Target
61e663fead542294c652bb525e396cc486de382e89434a2dd51c08bb25e02961
-
Size
145KB
-
MD5
651bca620a9eedfdcdbc6040ae80c290
-
SHA1
3f6f19dacc5d470cf8ad599d364b8f6201b421cf
-
SHA256
61e663fead542294c652bb525e396cc486de382e89434a2dd51c08bb25e02961
-
SHA512
c43a052184ced90bc2654571996c96b44fa589b3e2f000998a5bd5ea10b561dcf0f0d5daeedf775606ba25e7edda546af80d16d9589043ee72ac98c04ae501a2
-
SSDEEP
3072:bj+tZPXiMTLiiCRlqJk9f22TOt9rHWJL5+zgaKgVv2I6:b67PNLyGWJV+zgzb
Malware Config
Signatures
Files
-
61e663fead542294c652bb525e396cc486de382e89434a2dd51c08bb25e02961.exe windows x86
a3c76d11cfc64a2cb83113832ba004dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
SetEnvironmentVariableA
EnterCriticalSection
FreeLibrary
WriteFile
ResetEvent
GetACP
WaitForMultipleObjects
CreateFileA
GetCommandLineW
LeaveCriticalSection
FindFirstFileW
CompareFileTime
DeleteCriticalSection
FileTimeToSystemTime
WideCharToMultiByte
SetHandleCount
HeapReAlloc
WaitForSingleObject
MultiByteToWideChar
InterlockedExchange
GetStdHandle
WaitForSingleObjectEx
GlobalAlloc
RaiseException
CreateThread
GetEnvironmentStrings
CompareStringA
GetSystemInfo
HeapFree
LocalFree
GetEnvironmentStringsW
GetModuleFileNameA
FormatMessageW
TlsSetValue
CreateFileW
TlsGetValue
CreateEventW
TryEnterCriticalSection
FreeLibraryAndExitThread
GetFileType
CloseHandle
InterlockedExchangeAdd
TerminateProcess
LCMapStringW
FreeEnvironmentStringsW
OutputDebugStringA
lstrlenW
SetEvent
CreateMutexW
GetStartupInfoA
VirtualAlloc
GetModuleHandleW
GetCurrentProcess
GetModuleHandleA
GetCurrentProcessId
GetCurrentThreadId
GetStartupInfoW
InterlockedDecrement
GetCurrentThread
InterlockedIncrement
QueryPerformanceCounter
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoW
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetProcAddress
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetLastError
TlsAlloc
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetOEMCP
Sleep
RtlUnwind
HeapSize
GetLocaleInfoA
CompareStringW
user32
GetSystemMetrics
gdi32
DPtoLP
CombineRgn
RestoreDC
SetPixelV
CreateCompatibleBitmap
GetMapMode
RealizePalette
GetDeviceCaps
Escape
GetObjectA
GetTextColor
SetTextAlign
SetViewportExtEx
GetSystemPaletteEntries
CreateFontIndirectA
ExcludeClipRect
SetPixel
SetRectRgn
CreateBrushIndirect
BitBlt
GetBkColor
SetStretchBltMode
GetTextMetricsW
MoveToEx
GetClipBox
GetWindowExtEx
Polyline
CreateRectRgnIndirect
Ellipse
SetBrushOrgEx
CreateHalftonePalette
SetBkColor
GetStretchBltMode
IntersectClipRect
CreateFontA
CreateRoundRectRgn
GetStockObject
SetWindowExtEx
EndDoc
GetWindowOrgEx
SetViewportOrgEx
GetTextExtentPoint32A
ExtTextOutW
ScaleViewportExtEx
SetBkMode
CreatePatternBrush
CreateDIBitmap
ExtEscape
GetRgnBox
GetObjectW
GetDIBColorTable
DeleteObject
GetPaletteEntries
GetBitmapBits
RectVisible
CreateFontW
ExtTextOutA
GetDCOrgEx
ScaleWindowExtEx
SelectObject
CreateCompatibleDC
SelectPalette
SaveDC
SetMapMode
SetDIBColorTable
GetCurrentPositionEx
PolylineTo
RoundRect
CreatePalette
SetWindowOrgEx
CreateDCA
CreatePen
StretchDIBits
UnrealizeObject
PatBlt
GetDIBits
SetTextColor
GetTextExtentPointA
ExtSelectClipRgn
DeleteEnhMetaFile
GetTextExtentPoint32W
LPtoDP
CreateBitmap
DeleteDC
SelectClipRgn
CreatePolygonRgn
ole32
CoTaskMemFree
OleInitialize
OleDuplicateData
CoInitialize
CoSetProxyBlanket
CoTaskMemRealloc
msi
ord46
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ