?CloseWindowStationCloseWi
Static task
static1
Behavioral task
behavioral1
Sample
61af0f2b69ab3b3b57d4b47b1f1266e29c4b9526bb711414367c6c3e7e617f00.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
61af0f2b69ab3b3b57d4b47b1f1266e29c4b9526bb711414367c6c3e7e617f00.exe
Resource
win10v2004-20220901-en
General
-
Target
61af0f2b69ab3b3b57d4b47b1f1266e29c4b9526bb711414367c6c3e7e617f00
-
Size
166KB
-
MD5
7616b14a5fb45a00fd3bc3386887874d
-
SHA1
6137b8ebb56a18c991bea60f4e4ecb1def8390e7
-
SHA256
61af0f2b69ab3b3b57d4b47b1f1266e29c4b9526bb711414367c6c3e7e617f00
-
SHA512
603603f9ccadfa23ca49e30ca7309b5ccb1d2b5f26eeda7f309e2b4e486a7883509a2fe5251766baade9ca8c2945cc6b5d495182d1cbc502824d510696ec9853
-
SSDEEP
3072:LgBohzWR/f6hSK77EDT7g2BbZr8KWcQOjZFQmhhDgXAmrQiTYeWqd:LgBCI/fiSKsDg23hWcVzh2QmUijW
Malware Config
Signatures
Files
-
61af0f2b69ab3b3b57d4b47b1f1266e29c4b9526bb711414367c6c3e7e617f00.exe windows x86
284f0460785cad6dd2cd6c8a3b378a37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyMenu
kernel32
GlobalAlloc
GlobalGetAtomNameA
lstrcmpA
SetupComm
GetComputerNameExW
IsBadStringPtrA
OpenFileMappingW
GetThreadLocale
GetUserDefaultUILanguage
FormatMessageA
SetFileAttributesA
CreateEventW
FileTimeToSystemTime
GetModuleFileNameW
MultiByteToWideChar
AreFileApisANSI
GetVersionExA
OpenFileMappingA
Exports
Exports
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rewf Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sddfd Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwq Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwewe Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aewew Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ