Static task
static1
Behavioral task
behavioral1
Sample
861fef46ef8d838ed31dd109a1b6202327146a5945b9e733aad67e9d762100a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
861fef46ef8d838ed31dd109a1b6202327146a5945b9e733aad67e9d762100a8.exe
Resource
win10v2004-20220812-en
General
-
Target
861fef46ef8d838ed31dd109a1b6202327146a5945b9e733aad67e9d762100a8
-
Size
85KB
-
MD5
604041df49baa1c5ecd43e9e5a60d5d0
-
SHA1
d70f0ea278b65a59acf877e67e6bbf6e3c6e80f3
-
SHA256
861fef46ef8d838ed31dd109a1b6202327146a5945b9e733aad67e9d762100a8
-
SHA512
bf094a8e229fc59632f37e9c8a26ba9b2a28c52993d80d0cec65346981b59a76733988a742547bbb67fdd31bc22423ba4658a36e8a98c812934ace73910b6ade
-
SSDEEP
1536:0vioyjp8t6TDAqjofGvjLL961Tm14TT+6:0xQDXjofG7LZV
Malware Config
Signatures
Files
-
861fef46ef8d838ed31dd109a1b6202327146a5945b9e733aad67e9d762100a8.exe windows x86
22a93253eb98b5a8ae73d8f0df1ec83e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
GetProcAddress
PulseEvent
GetModuleHandleA
VirtualAlloc
GetProcessHeap
GetTempFileNameA
ResetEvent
user32
UpdateWindow
ShowWindow
gdi32
CreateHatchBrush
shell32
DuplicateIcon
ole32
CoInitialize
netapi32
NetDfsAddFtRoot
avifil32
AVIPutFileOnClipboard
msvfw32
DrawDibRealize
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: 512B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE