Static task
static1
Behavioral task
behavioral1
Sample
b061758c31648e6b31831fb0f6955a3e3e3d92ce71eac27ac69949fe4794e146.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b061758c31648e6b31831fb0f6955a3e3e3d92ce71eac27ac69949fe4794e146.exe
Resource
win10v2004-20220812-en
General
-
Target
b061758c31648e6b31831fb0f6955a3e3e3d92ce71eac27ac69949fe4794e146
-
Size
104KB
-
MD5
75d2b08da303425c86b4bf2feebd43c0
-
SHA1
651affcdfa22f1abe5920a2d33340bf548403b0d
-
SHA256
b061758c31648e6b31831fb0f6955a3e3e3d92ce71eac27ac69949fe4794e146
-
SHA512
791edc461f4e2402324d5c703902c9acc760262e40a5733d0cd5cdd7db8c05609514e71d3bb9e7c1501f117e7c445a0df52696f3a751e7eb98599515a953adcb
-
SSDEEP
1536:2WTOcUOnCsNm6EpRu5F3dq3lj7BN0gKgwCMakjNkGUG/ZnT3PUIRWrT2NM:2Wac9fm6nEBN52V5NkGH3cIus
Malware Config
Signatures
Files
-
b061758c31648e6b31831fb0f6955a3e3e3d92ce71eac27ac69949fe4794e146.exe windows x86
cbd577bac35926e3aa154d6099117459
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateDialogParamW
DrawStateW
wsprintfA
CreateWindowExW
PostMessageA
DialogBoxParamW
MessageBoxExW
EndDialog
LoadCursorA
GetCursorPos
InsertMenuA
GetPropA
LoadImageA
DrawTextExW
kernel32
QueryDosDeviceA
ReadConsoleW
SetErrorMode
GetLastError
ReplaceFileW
GetLogicalDriveStringsA
GetProcAddress
CreateMutexA
DeleteFileA
GetStringTypeA
GetLocaleInfoW
GetCommandLineA
CompareStringW
lstrcpyA
CreateDirectoryW
GetCurrentDirectoryA
GetACP
GetOEMCP
ReadFile
GetModuleHandleA
WaitForSingleObject
GetFileSize
OpenEventA
dhcpcsvc
McastGenUID
McastApiCleanup
McastApiStartup
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ