Static task
static1
Behavioral task
behavioral1
Sample
961b845cb95c5adb5c151176b795edb4de528551eacea679f80b09d6055c1629.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
961b845cb95c5adb5c151176b795edb4de528551eacea679f80b09d6055c1629.exe
Resource
win10v2004-20221111-en
General
-
Target
961b845cb95c5adb5c151176b795edb4de528551eacea679f80b09d6055c1629
-
Size
97KB
-
MD5
dd2e46a1f1bbfa1cfeedb43d2e16434f
-
SHA1
a0a9e941aab33b104ae8f44710362f856470cc55
-
SHA256
961b845cb95c5adb5c151176b795edb4de528551eacea679f80b09d6055c1629
-
SHA512
0d4af21ceb26617552370e42ff51828fa180ec478c5b153f01c6d107d5aaf18e26bab752d38568755e69f23076086776a2476a198d87b969de54c8fe9a513d94
-
SSDEEP
1536:Q1rPcoV0tTp6Lyo/h8smCqYJWXC0xD0uEtsLngQfyj2dTgclL5uO495hvEhEEJ:QUTQLy3sm+0S0itsLgQGuI5hvOEEJ
Malware Config
Signatures
Files
-
961b845cb95c5adb5c151176b795edb4de528551eacea679f80b09d6055c1629.exe windows x86
250af7973540e386ee95e4277c8622f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentDirectoryA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
VirtualProtect
GetSystemInfo
user32
GetSysColor
LoadBitmapA
OpenClipboard
DeleteMenu
ShowOwnedPopups
FindWindowA
FrameRect
SetWindowsHookExA
msvcrt
__setusermatherr
strtoul
_unlink
_initterm
__p__commode
_acmdln
__p__fmode
sqrt
fflush
__set_app_type
_adjust_fdiv
__getmainargs
ungetc
exit
_XcptFilter
_except_handler3
oleaut32
SysStringLen
SysAllocStringByteLen
VariantInit
SafeArrayUnaccessData
VariantClear
advapi32
OpenSCManagerA
CloseServiceHandle
CryptCreateHash
RegQueryInfoKeyA
OpenProcessToken
SetSecurityDescriptorGroup
RegEnumKeyExW
LookupPrivilegeValueW
RegOpenKeyExA
GetUserNameA
DeregisterEventSource
RegEnumValueW
comctl32
ImageList_GetIconSize
CreateToolbarEx
ImageList_EndDrag
PropertySheetW
CreateStatusWindowA
ImageList_Draw
ImageList_SetOverlayImage
ImageList_BeginDrag
InitializeFlatSB
DestroyPropertySheetPage
ImageList_DragShowNolock
CreatePropertySheetPageA
ImageList_Replace
shell32
SHGetSettings
SHBrowseForFolder
SHBrowseForFolderW
DragQueryFile
SHAddToRecentDocs
ShellExecuteEx
ExtractIconW
SHGetPathFromIDListW
Shell_NotifyIconA
SHBindToParent
ExtractAssociatedIconW
ole32
StringFromIID
CoFreeUnusedLibraries
CreateItemMoniker
StgCreateDocfileOnILockBytes
CoCreateGuid
OleDraw
CoRevokeClassObject
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ