Static task
static1
Behavioral task
behavioral1
Sample
861d8ee72a88953a88da6e4292c42a9b62bb5bdbca9efd12dbf1a15dbeeaf40e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
861d8ee72a88953a88da6e4292c42a9b62bb5bdbca9efd12dbf1a15dbeeaf40e.exe
Resource
win10v2004-20220812-en
General
-
Target
861d8ee72a88953a88da6e4292c42a9b62bb5bdbca9efd12dbf1a15dbeeaf40e
-
Size
305KB
-
MD5
835d381ef9ff8024f0f56f8ed52519da
-
SHA1
93ccde4bdf5465e172f441bed4a7109dc683df0e
-
SHA256
861d8ee72a88953a88da6e4292c42a9b62bb5bdbca9efd12dbf1a15dbeeaf40e
-
SHA512
1f8b7f1efc724662fdfb782882d3b5456df04a285421e38caf9304d749cacc72cb142922f72712486538dda5fa35020488daa6af3c0b8e644520962fdcc86f14
-
SSDEEP
6144:nyOOeRYhZf2udr0YT1nfjXA6La5sfZ1JmZtEyA3:nRrGhlJrH1LA6tt
Malware Config
Signatures
Files
-
861d8ee72a88953a88da6e4292c42a9b62bb5bdbca9efd12dbf1a15dbeeaf40e.exe windows x86
e83f37e8cb471b77d6772ab497a6aee5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
WriteFile
CreateJobObjectA
GetModuleFileNameA
LockResource
SearchPathA
VirtualFree
FreeLibrary
CreateFileA
GetTempFileNameA
GetTempPathA
CloseHandle
LoadLibraryA
GetTickCount
LoadResource
SizeofResource
GetProcAddress
FindResourceA
LoadLibraryExW
WinExec
GetShortPathNameA
GetModuleHandleA
ExitProcess
MoveFileExW
GetCommandLineW
user32
SetDlgItemTextA
MoveWindow
GetWindowRect
GetDesktopWindow
EndDialog
DialogBoxParamA
shell32
CommandLineToArgvW
Sections
.text Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ