Static task
static1
Behavioral task
behavioral1
Sample
61c322675208191c979604d9bc74cd408787bcc756ad19f0f788cee18b896ce9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
61c322675208191c979604d9bc74cd408787bcc756ad19f0f788cee18b896ce9.exe
Resource
win10v2004-20220812-en
General
-
Target
61c322675208191c979604d9bc74cd408787bcc756ad19f0f788cee18b896ce9
-
Size
184KB
-
MD5
8376f5fd8498a566c8d73399b097bf20
-
SHA1
e8ad5c91e9a574d567290e9e50b4dcc684b44239
-
SHA256
61c322675208191c979604d9bc74cd408787bcc756ad19f0f788cee18b896ce9
-
SHA512
60c808b66260978e612914344b54162dffa4753653777fa5e0fde48b2677b57569051cbbf1fa8f6cbbaeaa008d76b830facd78052cbd1cfb2f2233d0f9afec69
-
SSDEEP
3072:79OpupzK+gZytGAySWodXElYJIjaKWzoI7h+aS1G2:7UpogktGAyWC8caKWzo0naG2
Malware Config
Signatures
Files
-
61c322675208191c979604d9bc74cd408787bcc756ad19f0f788cee18b896ce9.exe windows x86
35c4255af1abfb8ba6b47702647da52c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr71
strcat
strcpy
vsprintf
sprintf
__security_error_handler
_except_handler3
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
strncmp
exit
__p___initenv
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strcmp
strlen
strtok
sscanf
realloc
qsort
calloc
pow
longjmp
_setjmp3
strstr
??3@YAXPAX@Z
_purecall
system
printf
puts
fprintf
fopen
fscanf
fclose
strrchr
strncpy
strncat
free
malloc
strchr
_cexit
_mkdir
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
ExitProcess
GetFileAttributesA
GetOverlappedResult
CreateEventA
GetFileSize
GetLastError
GetDiskFreeSpaceA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetFileAttributesExA
CreateFileA
ReadFile
SetFilePointer
WriteFile
SetFileTime
CloseHandle
GetCurrentDirectoryA
GetLogicalDrives
GetDriveTypeA
SetFileAttributesA
DeleteFileA
MoveFileA
GetSystemTimeAsFileTime
user32
CharUpperA
Sections
.text Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE