Static task
static1
Behavioral task
behavioral1
Sample
61d7e572b6dea63a2f5761730a82df52da23023d2dc6e618562e50fe6d2d8ae4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
61d7e572b6dea63a2f5761730a82df52da23023d2dc6e618562e50fe6d2d8ae4.exe
Resource
win10v2004-20220812-en
General
-
Target
61d7e572b6dea63a2f5761730a82df52da23023d2dc6e618562e50fe6d2d8ae4
-
Size
109KB
-
MD5
276d86c88311bd7e5f461ce98b4f9bc4
-
SHA1
dc8bb5edc3a021bdad709821aa6dfd5785498e23
-
SHA256
61d7e572b6dea63a2f5761730a82df52da23023d2dc6e618562e50fe6d2d8ae4
-
SHA512
9e6673044d5ee7a4d5e62ed0f7ce0ec7849142712c8b68f72641b2bcdb0d696942027440dd973358e19ec3d1e4150cc6fafe9005dd087de689f37ae991f534e0
-
SSDEEP
1536:2IoZByNGW17i40br1zi/JmtciPiaBHjx5pQZ8HltxLgCXSdXLU3:2ICZW1OZNtciqaBl5pXfhSts
Malware Config
Signatures
Files
-
61d7e572b6dea63a2f5761730a82df52da23023d2dc6e618562e50fe6d2d8ae4.exe windows x86
cf2e49c6b64b2a5f3b9da4d6450d2664
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
lstrcmpiW
GetTempPathW
GetThreadLocale
SetFileAttributesW
VirtualProtect
SizeofResource
GetModuleHandleA
GetVersion
DeleteFileA
GetDriveTypeA
lstrlenA
ExitProcess
GetUserDefaultLCID
GetEnvironmentVariableA
GetProcAddress
lstrcatA
RtlMoveMemory
SetThreadLocale
GetTempPathA
CreateProcessA
GetCPInfo
MulDiv
SetFilePointer
VirtualQuery
GetCommandLineW
InterlockedDecrement
GetDiskFreeSpaceA
GetCurrentDirectoryA
LoadResource
GetCurrentThread
msvcrt
__set_app_type
_exit
tan
_controlfp
__getmainargs
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
_XcptFilter
_initterm
__p___initenv
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Ryteziio Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ