Static task
static1
Behavioral task
behavioral1
Sample
61801302a136b66b6a84ab00477bb9e8f2d00f034702a2e6a3f2e2ecf1c6c352.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
61801302a136b66b6a84ab00477bb9e8f2d00f034702a2e6a3f2e2ecf1c6c352.exe
Resource
win10v2004-20220812-en
General
-
Target
61801302a136b66b6a84ab00477bb9e8f2d00f034702a2e6a3f2e2ecf1c6c352
-
Size
138KB
-
MD5
5ef430a65e4deb3389924158156b7853
-
SHA1
50b6ca02e4aae1e4c2ad00dab5336bcf342b2063
-
SHA256
61801302a136b66b6a84ab00477bb9e8f2d00f034702a2e6a3f2e2ecf1c6c352
-
SHA512
55746b48cb8a42b877f393801e16ef1446abce334e51454e2402ba7cd6fe10929f1a0bffbb519302bae82a063513ceae2a099777272b00c131c92b0f7a9365a0
-
SSDEEP
3072:F0myqqiDm7HRRbVxU0PvcoF1ZBIdzj+57fGfS5R:3JqxDbc0tF1fIdOBUS5
Malware Config
Signatures
Files
-
61801302a136b66b6a84ab00477bb9e8f2d00f034702a2e6a3f2e2ecf1c6c352.exe windows x86
71f458a3392b1762de738f2a837c2b3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CreateFileA
GetFileAttributesA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
CloseHandle
lstrlenA
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
WritePrivateProfileStringA
GetFullPathNameA
user32
wvsprintfA
advapi32
CloseServiceHandle
StartServiceA
CreateServiceA
OpenSCManagerA
shell32
DragAcceptFiles
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE