Static task
static1
Behavioral task
behavioral1
Sample
b611ca107b3e484c8e814395fd4405c9720777a5054b124cde8155925ea4a3a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b611ca107b3e484c8e814395fd4405c9720777a5054b124cde8155925ea4a3a7.exe
Resource
win10v2004-20220812-en
General
-
Target
b611ca107b3e484c8e814395fd4405c9720777a5054b124cde8155925ea4a3a7
-
Size
39KB
-
MD5
0cb497a968f1b813bf0d00da5e3d43e8
-
SHA1
efd0bba3c023fff2b2dbba146027d98ed29ee10d
-
SHA256
b611ca107b3e484c8e814395fd4405c9720777a5054b124cde8155925ea4a3a7
-
SHA512
4092e3c5450de5071bd8f4a7fc15045b0e850b991ae1897dd0e34086b1bc89b52b868a82ecfdb083e35085358fc3071786e8d0d733d935777595c479205cbf9b
-
SSDEEP
768:lno3zOlmVeBkY1PnLOSSVhSHXEMBXxDRl0lWTxe:FSOlmVeBks6fjFQCt
Malware Config
Signatures
Files
-
b611ca107b3e484c8e814395fd4405c9720777a5054b124cde8155925ea4a3a7.exe windows x86
4f018374b73b7b13b4659115f788e6ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscat32
CryptCATOpen
ole32
CoTreatAsClass
IsValidPtrIn
user32
GetDC
MessageBoxA
wsprintfA
ReleaseDC
kernel32
LocalAlloc
GetSystemTimeAsFileTime
InterlockedDecrement
SetErrorMode
LoadLibraryA
lstrlenA
TerminateProcess
FreeLibrary
GetModuleFileNameA
GetCurrentThreadId
GetCurrentProcess
VirtualAlloc
QueryPerformanceCounter
DisableThreadLibraryCalls
GetVersionExA
LocalFree
InterlockedIncrement
UnhandledExceptionFilter
GetCurrentProcessId
SetUnhandledExceptionFilter
Sleep
GetProcAddress
GetProfileStringA
cmdial32
AutoDialFunc
Sections
.text Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE