Static task
static1
Behavioral task
behavioral1
Sample
d61e67d75d00774e6e2da93c0c0643f59c639a6480d2e7a576c3fb39c54f8c63.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d61e67d75d00774e6e2da93c0c0643f59c639a6480d2e7a576c3fb39c54f8c63.exe
Resource
win10v2004-20220901-en
General
-
Target
d61e67d75d00774e6e2da93c0c0643f59c639a6480d2e7a576c3fb39c54f8c63
-
Size
108KB
-
MD5
82feec82532851c789f0c76b0e55fb20
-
SHA1
3271b3179faba986eeb2653b5be2b516ddb31281
-
SHA256
d61e67d75d00774e6e2da93c0c0643f59c639a6480d2e7a576c3fb39c54f8c63
-
SHA512
84239f1f7332214f0494618bab34f0379b469ff5ecf93e71609071e0f39799f507c72c29e8e50e12392bd1c7e44b6c0ea10e6969662b0323315880f69867867d
-
SSDEEP
384:n77pYjvY6XtFiwG1mX7kSrvxvXusv/bjvY6XtFi5ziq7HDefCRdpSQXtP0PhKbva:UhA1gAmesv/vhQ+JStPOhKby
Malware Config
Signatures
Files
-
d61e67d75d00774e6e2da93c0c0643f59c639a6480d2e7a576c3fb39c54f8c63.exe windows x86
c39b66e6fba1d4c0e922f13b81d96b90
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
SetFileAttributesW
SetLastError
WriteFile
InterlockedExchange
GetCurrentProcess
HeapCreate
CopyFileA
CreateEventA
GetTimeFormatA
GetDiskFreeSpaceA
InterlockedDecrement
WriteProcessMemory
GetCurrentThreadId
GetComputerNameA
IsValidLocale
GetAtomNameA
FoldStringW
GetCurrentDirectoryA
SleepEx
LoadLibraryA
GetDateFormatW
CreateDirectoryA
upnphost
DllGetClassObject
DllUnregisterServer
DllCanUnloadNow
DllRegisterServer
ServiceMain
ctl3d32
Ctl3dEnabled
Ctl3dRegister
Ctl3dUnregister
dbnmpntw
ConnectionRead
ConnectionVer
ConnectionClose
ConnectionError
ConnectionWrite
user32
DrawIcon
CreateWindowExW
SetCursorPos
GetWindowTextA
DialogBoxParamW
LoadImageW
wsprintfA
IsWindow
IsCharLowerA
DispatchMessageA
ShowWindow
PeekMessageA
CharToOemA
SetFocus
GetMessageA
GetCaretPos
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ