Static task
static1
Behavioral task
behavioral1
Sample
c61803d89235547af78d9e095413f53afce3fc543824af477e29ba7cc1d37292.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c61803d89235547af78d9e095413f53afce3fc543824af477e29ba7cc1d37292.exe
Resource
win10v2004-20221111-en
General
-
Target
c61803d89235547af78d9e095413f53afce3fc543824af477e29ba7cc1d37292
-
Size
76KB
-
MD5
efc2d2fd8ba9420b69fbdb5c298c9962
-
SHA1
83d5dd11ec18c3b96eb0693f70cd8acdcece54e6
-
SHA256
c61803d89235547af78d9e095413f53afce3fc543824af477e29ba7cc1d37292
-
SHA512
a07c504af0d9bf431ff4b90679b736a855d3cc41826a975846313135bd1b0f5694914adadc223fbb1c63f44680f2a3b664ebffef0246d153d4fa264cf3f57269
-
SSDEEP
1536:o7raJ/Bi8Jntwj02I+429WgENiObUOx4pjVrs2ryrd1vUQuq6:o7WJ/BtJtwg2I+VWgEvbUOCHs2qo
Malware Config
Signatures
Files
-
c61803d89235547af78d9e095413f53afce3fc543824af477e29ba7cc1d37292.exe windows x86
b5ec863da51d6dce7c4d0f370153ab5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleOutputAttribute
FindCloseChangeNotification
_lcreat
GetThreadPriorityBoost
lstrcatW
CreateIoCompletionPort
IsBadHugeWritePtr
GetTempFileNameW
DnsHostnameToComputerNameW
VirtualFreeEx
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE