Static task
static1
Behavioral task
behavioral1
Sample
61c3925dbd7f3e3190dbee4372460154bab9718d8077022ef70e63de6c6f7fc3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
61c3925dbd7f3e3190dbee4372460154bab9718d8077022ef70e63de6c6f7fc3.exe
Resource
win10v2004-20220901-en
General
-
Target
61c3925dbd7f3e3190dbee4372460154bab9718d8077022ef70e63de6c6f7fc3
-
Size
76KB
-
MD5
720008272e83b34b09234bb44c3a16e0
-
SHA1
1b12e6edadbb814fd4db3219fa32bad9d00cda84
-
SHA256
61c3925dbd7f3e3190dbee4372460154bab9718d8077022ef70e63de6c6f7fc3
-
SHA512
893a50e1eccb82cbfecaf3cd7da608493b595b88e8d59ad023f2943b4cda5ef0507422b7c6cb9205cd6da3fad3f83d262773d7887808e4c56c81fff9fadf841a
-
SSDEEP
768:AeQT246C5UxxLoT5ulfdy6ws6LJVUzgF93t9KyHLt:Ae9fzlBj6JVEctMyHLt
Malware Config
Signatures
Files
-
61c3925dbd7f3e3190dbee4372460154bab9718d8077022ef70e63de6c6f7fc3.exe windows x86
485e06ee2c6e07201e14136075eec618
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
ExitThread
Sleep
SetProcessWorkingSetSize
GetCurrentProcess
GetTickCount
CreateProcessA
CreateThread
SetFileAttributesA
GetModuleFileNameA
GetLastError
CloseHandle
ReleaseMutex
OpenMutexA
WinExec
GetTempPathA
ResumeThread
SetThreadPriority
SetPriorityClass
GetCurrentThread
WaitForSingleObject
ExitProcess
lstrlenA
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
HeapAlloc
TerminateProcess
RtlUnwind
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
SetFilePointer
GetStdHandle
WriteFile
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ