Static task
static1
Behavioral task
behavioral1
Sample
840e60ff81f412add8b8238974f1cd287f364cecc35c78c221c6efb90497ae40.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
840e60ff81f412add8b8238974f1cd287f364cecc35c78c221c6efb90497ae40.exe
Resource
win10v2004-20220901-en
General
-
Target
840e60ff81f412add8b8238974f1cd287f364cecc35c78c221c6efb90497ae40
-
Size
172KB
-
MD5
3573282d0a1a26a8ed9e8737b566af4a
-
SHA1
9b171fd99d15ef3c4a874591ebb7d9b2e279e9fe
-
SHA256
840e60ff81f412add8b8238974f1cd287f364cecc35c78c221c6efb90497ae40
-
SHA512
8d24d53aaa820db126b907a80f48052dce82f9d0be30b36f0c41eaf5e67c81ec9d800ff0f3908d477c0b27ca39432dc3b666e32bfc7cf456a472b72731b454fb
-
SSDEEP
3072:w4rtWeb8e8Bc22ujkU2qKa38DBH9jfl05lLL5KK:witWre8Bc26T11r7C51x
Malware Config
Signatures
Files
-
840e60ff81f412add8b8238974f1cd287f364cecc35c78c221c6efb90497ae40.exe windows x86
e87bfc6f544cb7320996f30a67f6b4d7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
GetCalendarInfoA
CreateFileMappingA
WaitForSingleObject
SetEvent
MapViewOfFile
TlsGetValue
GetVersionExA
GetConsoleMode
GetModuleHandleA
ExitProcess
CreateProcessW
MoveFileExW
TlsAlloc
CreateThread
InterlockedIncrement
GetExitCodeProcess
UnmapViewOfFile
GetTempPathW
GetConsoleCP
HeapFree
GetModuleHandleW
EnumResourceNamesA
FindFirstFileW
SetLastError
GetProcAddress
LoadLibraryExW
GetProcessHeap
HeapAlloc
CreateFileW
CreateDirectoryW
GetVersionExW
CreateFileA
WriteConsoleW
GetEnvironmentVariableW
TlsFree
TlsSetValue
GetLastError
msimg32
AlphaBlend
TransparentBlt
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
ole32
CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
comctl32
ImageList_DragLeave
ImageList_DragMove
ImageList_DragEnter
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ