Static task
static1
Behavioral task
behavioral1
Sample
611c02d5828c4ed6a9ac14fce9715855062b4082090043f9862c217fb9710228.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
611c02d5828c4ed6a9ac14fce9715855062b4082090043f9862c217fb9710228.exe
Resource
win10v2004-20220812-en
General
-
Target
611c02d5828c4ed6a9ac14fce9715855062b4082090043f9862c217fb9710228
-
Size
93KB
-
MD5
e7607f4d12f65cc52e5cb04602b669b0
-
SHA1
8bd7a1c6b855f33fc6a831b12a265609c67aaed1
-
SHA256
611c02d5828c4ed6a9ac14fce9715855062b4082090043f9862c217fb9710228
-
SHA512
66d6cf4523ba78241987f3a3ea1ab34c04a472cdea3cb0779efd5f740cfdfbff3563d731e102aaed824076fbdb0a080dd8b2ca43885a6e5583db53e3e040ffa4
-
SSDEEP
1536:c5AfszKMFR9lSUT+4qyIs/5k6OPMgLlrIWZ9F4OA0rc0pcmTWpwFtOGA:c5UszXfSUrqy/SMgLlMO4v0rc0cmTJty
Malware Config
Signatures
Files
-
611c02d5828c4ed6a9ac14fce9715855062b4082090043f9862c217fb9710228.exe windows x86
a589efa4974c5feb1082604ab92695da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
EnterCriticalSection
ExitProcess
ExitThread
FileTimeToLocalFileTime
FindClose
GetACP
GetCommandLineA
GetCurrentDirectoryA
GetExitCodeThread
GetModuleHandleA
GetOEMCP
GetProcessWorkingSetSize
GetStartupInfoA
GetVersionExA
GlobalReAlloc
HeapAlloc
HeapCreate
HeapReAlloc
IsValidCodePage
LocalFree
MultiByteToWideChar
RtlUnwind
SetEnvironmentVariableA
SetLastError
SetUnhandledExceptionFilter
SizeofResource
lstrcatA
lstrcmpiA
lstrcpynA
user32
SetCursor
RegisterWindowMessageA
MapWindowPoints
IsIconic
GetUserObjectSecurity
GetCursorPos
ole32
CoCreateInstance
CoBuildVersion
CoCreateGuid
advapi32
AccessCheckByType
olepro32
OleCreateFontIndirect
OleIconToCursor
Sections
.text Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ