Static task
static1
Behavioral task
behavioral1
Sample
61004318181dc8e3c388ae5dd269feba4e6ec2766d90979463bd2224ad291c31.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
61004318181dc8e3c388ae5dd269feba4e6ec2766d90979463bd2224ad291c31.exe
Resource
win10v2004-20220812-en
General
-
Target
61004318181dc8e3c388ae5dd269feba4e6ec2766d90979463bd2224ad291c31
-
Size
23KB
-
MD5
528b484f137a998ca5084242c3c22804
-
SHA1
45842ae4c9eb6905f5915e522d61f8c316f93698
-
SHA256
61004318181dc8e3c388ae5dd269feba4e6ec2766d90979463bd2224ad291c31
-
SHA512
82a574df8a3c8eecff9af4c198dc2816a8c8d18e3fa81acdc54aa860a4fb0d2f19f5b6efc80700d376a55bff4ca1ace9b71a0365b22bd91570aaefe815191fd8
-
SSDEEP
384:enFO6Q5L1gsuw5QZ6hTzDQ1GlT21NOLOj1QbTTTYKTTTYKTTTTTTTTp+NX9:mO6QXgsuNsHGfOLOj1Q9+N
Malware Config
Signatures
Files
-
61004318181dc8e3c388ae5dd269feba4e6ec2766d90979463bd2224ad291c31.exe windows x86
2e9a3ca5479d0ed1722a9e665b857908
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
__p__commode
_controlfp
_except_handler3
__set_app_type
_XcptFilter
__p__fmode
_exit
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
user32
SendMessageW
DestroyWindow
SendMessageA
PostQuitMessage
CreateWindowExW
LoadIconW
LoadCursorW
RegisterClassExW
LoadStringA
LoadStringW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
kernel32
LoadLibraryA
CreateFileW
GetModuleHandleW
GetCurrentDirectoryW
FindFirstChangeNotificationW
GetFileTime
InterlockedIncrement
GetCommandLineW
GetCurrentProcessId
GetTickCount
CloseHandle
GetModuleHandleA
GetStartupInfoA
SetLastError
InterlockedDecrement
comctl32
InitCommonControlsEx
shell32
CommandLineToArgvW
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ