Static task
static1
Behavioral task
behavioral1
Sample
f61bae5648a0ad2d5ae4f0a91de6366f87537cf1a8e02423b5d311fc961683f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f61bae5648a0ad2d5ae4f0a91de6366f87537cf1a8e02423b5d311fc961683f7.exe
Resource
win10v2004-20220901-en
General
-
Target
f61bae5648a0ad2d5ae4f0a91de6366f87537cf1a8e02423b5d311fc961683f7
-
Size
336KB
-
MD5
91927746a9e1a9c6913b0e32fed19640
-
SHA1
4ea1423ba854860d732b34c6ed6f4c2d2099471d
-
SHA256
f61bae5648a0ad2d5ae4f0a91de6366f87537cf1a8e02423b5d311fc961683f7
-
SHA512
8c2c8648d49dc461048398155a9a2727be4be4c1ea1fab6ddcbf41a40f2f552c6dd1bb0f1fd3313216db4ad27f0dbef9849885a916421b51b9e566989c98b107
-
SSDEEP
6144:Zw/niCYMMDHIOPRWXGVjDmlGEUG5xWPGji2AOKYetztT:ZKnJrMDRRecmlGvGbWPGjiDOK5
Malware Config
Signatures
Files
-
f61bae5648a0ad2d5ae4f0a91de6366f87537cf1a8e02423b5d311fc961683f7.exe windows x86
f7f1e32c03386b1574bb62507817cf02
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetStartupInfoA
HeapFree
LocalReAlloc
MultiByteToWideChar
SetCurrentDirectoryA
GetModuleHandleA
lstrcatA
lstrcpyA
lstrcpynA
VirtualAlloc
LoadLibraryA
GetCommandLineA
FreeLibrary
SetErrorMode
ExitProcess
user32
LoadIconW
LoadCursorW
gdi32
GetStockObject
advapi32
RegQueryValueExW
Sections
.text Size: 299KB - Virtual size: 299KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ