Static task
static1
Behavioral task
behavioral1
Sample
761d56b51240c1e5831864095b6c72f508103a89c6da585b382ccc735c169c26.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
761d56b51240c1e5831864095b6c72f508103a89c6da585b382ccc735c169c26.exe
Resource
win10v2004-20221111-en
General
-
Target
761d56b51240c1e5831864095b6c72f508103a89c6da585b382ccc735c169c26
-
Size
352KB
-
MD5
ecf4170f9da8df5028de856d77bedb7a
-
SHA1
a10ef2afee821b1527a7e08263d0effbfe8fe099
-
SHA256
761d56b51240c1e5831864095b6c72f508103a89c6da585b382ccc735c169c26
-
SHA512
8d359d2302e898bd42490ce7bb6d1f92b58d0847fc7ac436df226e0b1c083acce9fc70a15c0f69b7c469868dc2bd2165471d4e5721601c240343bbafddff0043
-
SSDEEP
6144:hJXCivU43syHmJcfa/x7mCcA7MX6Uj17VVG+gnyX9iR:Gk5s+mJcfO4xA7pUjppz
Malware Config
Signatures
Files
-
761d56b51240c1e5831864095b6c72f508103a89c6da585b382ccc735c169c26.exe windows x86
6c38a7c5fac2c492c30dbe4ec37511e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
HeapCreate
FindClose
GetCommandLineW
UnmapViewOfFile
LoadLibraryW
GetSystemTime
PulseEvent
CreateThread
GlobalUnlock
Sleep
GetModuleHandleA
ResetEvent
GetCurrentDirectoryA
CloseHandle
GetTickCount
GetComputerNameA
lstrcatA
CreateFileW
lstrlenA
user32
DispatchMessageA
GetDlgItem
GetKeyState
GetScrollBarInfo
SetFocus
CheckRadioButton
IsWindow
DrawEdge
GetDC
DrawMenuBar
CreateWindowExA
CallWindowProcA
FillRect
clbcatq
SetupOpen
DowngradeAPL
UpdateFromAppChange
CheckMemoryGates
SetSetupOpen
timedate.cpl
CPlApplet
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ