Static task
static1
Behavioral task
behavioral1
Sample
661f6069ca78ff642599eacfe2ccc6e13c6417898afc56a906146220e71dc837.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
661f6069ca78ff642599eacfe2ccc6e13c6417898afc56a906146220e71dc837.exe
Resource
win10v2004-20220812-en
General
-
Target
661f6069ca78ff642599eacfe2ccc6e13c6417898afc56a906146220e71dc837
-
Size
811KB
-
MD5
1fd07d74d84fc1c5e5b5ffa20fa93d8a
-
SHA1
50f7f7a55ec3eb79dbabecec2337bb9c910a0eeb
-
SHA256
661f6069ca78ff642599eacfe2ccc6e13c6417898afc56a906146220e71dc837
-
SHA512
61f4c2eb35448d902b86daf0f9f9844f3c85a4db077e55df187bfcfb5b9fc020e0da50e4d03c155fa0b8a8a028a7d04ae3fa31ab6f931b637dbdaf8685af51b5
-
SSDEEP
12288:QDhANr7c7eMHJ/TYZHgxKTCnIuHglqEEyR/yC2j1O3/voXq/d8PoJwExZM25EC0:ShAl7chNuSKWnI1nEyl146/uPoJtPa
Malware Config
Signatures
Files
-
661f6069ca78ff642599eacfe2ccc6e13c6417898afc56a906146220e71dc837.exe windows x86
5763ebf5cdb3c9ec465f43cddabd43de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CancelIo
GetFileSize
VirtualProtectEx
GetCalendarInfoA
WriteConsoleW
TlsGetValue
GetCommandLineW
GetTickCount
CloseHandle
GlobalFree
lstrlenW
CreateDirectoryW
CancelIo
CreateFileA
GetConsoleTitleW
Sleep
InitializeCriticalSection
RemoveDirectoryA
EnterCriticalSection
ReadFile
GetStartupInfoA
LeaveCriticalSection
GetModuleFileNameA
GetModuleHandleA
DeleteFileA
user32
GetWindowLongA
GetSysColor
IsWindowVisible
MessageBoxA
wsprintfA
DispatchMessageA
FillRect
GetWindowDC
EqualRect
GetWindowLongA
IsWindowEnabled
PeekMessageA
IsWindow
cryptdlg
CertTrustCertPolicy
CertTrustInit
CertConfigureTrustA
CertTrustCleanup
advapi32
RegCloseKey
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE