Static task
static1
Behavioral task
behavioral1
Sample
611ce0418a80446c9ed03d8d148178c9ae9152aaa9a919a2eb84281b36fad07b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
611ce0418a80446c9ed03d8d148178c9ae9152aaa9a919a2eb84281b36fad07b.exe
Resource
win10v2004-20220812-en
General
-
Target
611ce0418a80446c9ed03d8d148178c9ae9152aaa9a919a2eb84281b36fad07b
-
Size
312KB
-
MD5
16b2719b3686b1447009da0f0f495e3a
-
SHA1
5df063c609f0e70797e5adae4abd7d12fa860325
-
SHA256
611ce0418a80446c9ed03d8d148178c9ae9152aaa9a919a2eb84281b36fad07b
-
SHA512
ca0f0671237692d48fea3290353d9963fa4382c488572c1568fe5a50e9bdd1785549f2d8ed480d3a10c89ac714bff11fe5d76b549a928bd23e8e05ec0bfc76db
-
SSDEEP
6144:Ct/4WB6ycJpBHIoReOyS4nUrqmiuFFDZhyLl13OUz/8m10h:o4tRsnS4UZiMJZ4BYUZmh
Malware Config
Signatures
Files
-
611ce0418a80446c9ed03d8d148178c9ae9152aaa9a919a2eb84281b36fad07b.exe windows x86
eecf8b9bb03079086ef90c80b16941cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
GetModuleHandleA
GetCurrentProcessId
IsDebuggerPresent
FlushFileBuffers
GetCommandLineA
HeapCreate
GlobalFree
RaiseException
GetLocaleInfoA
VirtualProtect
OpenSemaphoreA
InterlockedExchange
GetCurrentProcess
GetACP
WriteConsoleA
GetSystemDirectoryA
SetEvent
GetStdHandle
GetCurrentThread
GetCompressedFileSizeA
user32
SetForegroundWindow
BeginPaint
GetFocus
wsprintfA
ValidateRgn
ShowWindow
DrawTextA
FillRect
SetActiveWindow
GetCursorPos
GetClassNameA
GetParent
GetDlgItem
FrameRect
GetWindow
GetWindowTextLengthA
EndPaint
IsIconic
ReleaseDC
linkinfo
GetLinkInfoData
DestroyLinkInfo
ResolveLinkInfoA
GetCanonicalPathInfoA
IsValidLinkInfo
rtutils
LogEventA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ