Static task
static1
Behavioral task
behavioral1
Sample
61a22386bb9be31e492695b77dd2db5ee6022fdc3eeb54ed4042def86aed1091.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
61a22386bb9be31e492695b77dd2db5ee6022fdc3eeb54ed4042def86aed1091.exe
Resource
win10v2004-20221111-en
General
-
Target
61a22386bb9be31e492695b77dd2db5ee6022fdc3eeb54ed4042def86aed1091
-
Size
179KB
-
MD5
491570e93785fc3e21b4891fbda28c83
-
SHA1
24c288e124ac3844f7444ff61757941a9e73b5bb
-
SHA256
61a22386bb9be31e492695b77dd2db5ee6022fdc3eeb54ed4042def86aed1091
-
SHA512
dba30c7127132708ffa58fe51750c46499a584fbae520f7b43f4fecf9b788dbfcdac55a10e70d7f042ec86f3c7ed73be88d94441614b4e2efda632903b863d6d
-
SSDEEP
3072:jDdrYcVR+2UUCIIMe2DfqTOrl+eoLtbOTu+IKRHqllvzLO6kwXc/Kk4Sv:jaMUIc4loxOTTIcyrLO6kgmgSv
Malware Config
Signatures
Files
-
61a22386bb9be31e492695b77dd2db5ee6022fdc3eeb54ed4042def86aed1091.exe windows x86
ff82f42eed2921e093edd7190c5fc3be
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetACP
HeapAlloc
GetCurrentProcess
IsDebuggerPresent
GetCPInfo
VirtualAlloc
LCMapStringA
GetStringTypeA
GetStringTypeW
EnumResourceTypesA
SetUnhandledExceptionFilter
FindFirstVolumeMountPointA
WriteFile
RtlUnwind
LCMapStringW
LoadLibraryA
GetOEMCP
GetLocaleInfoA
oleacc
GetOleaccVersionInfo
AccessibleObjectFromEvent
msimg32
TransparentBlt
Sections
.text Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ