Static task
static1
Behavioral task
behavioral1
Sample
615bcc4f59d4b1d6e6fe5704debf0d11abe08a1de1086a6c7d9f5f0c329669e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
615bcc4f59d4b1d6e6fe5704debf0d11abe08a1de1086a6c7d9f5f0c329669e2.exe
Resource
win10v2004-20220812-en
General
-
Target
615bcc4f59d4b1d6e6fe5704debf0d11abe08a1de1086a6c7d9f5f0c329669e2
-
Size
336KB
-
MD5
171f097a445f7557dda1f35646ac956f
-
SHA1
d6116657a44ff11bff8db2ead93d715da17078f0
-
SHA256
615bcc4f59d4b1d6e6fe5704debf0d11abe08a1de1086a6c7d9f5f0c329669e2
-
SHA512
61eb8e9382431e390577993b9a87da0090842b8c15154f3d35d514ee09e1bec36207112828003717f7a9e0829cd14769949a2a6ead13ffbf04ef2ea5a6f92c42
-
SSDEEP
6144:UoWxKsRIArbDyHKepE6Pa28fVBGs6mAqJaNevX5H9hKF6:lWYbkQve6Pa28b/6moNWt9hKM
Malware Config
Signatures
Files
-
615bcc4f59d4b1d6e6fe5704debf0d11abe08a1de1086a6c7d9f5f0c329669e2.exe windows x86
7d68d9f536271a43178cdd039883c0a0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessagePos
GetInputState
CharNextA
GetDesktopWindow
kernel32
GetCurrentThread
GetVersion
GetModuleHandleA
lstrcmpiW
GetOEMCP
GlobalFindAtomW
DeleteFileA
GetLastError
CopyFileA
SetCurrentDirectoryA
GetTickCount
lstrcmpA
GetCommandLineA
lstrlenA
GetThreadLocale
GlobalFindAtomA
GetCurrentThreadId
GetACP
GetCurrentProcessId
GetDriveTypeA
VirtualAlloc
gdi32
SetColorSpace
SetViewportOrgEx
SelectPalette
GetPixel
GetTextMetricsA
SetTextColor
SetWindowExtEx
GetStockObject
LineTo
SetBkColor
GetDCOrgEx
EndDoc
comctl32
InitCommonControls
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ardata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE