Static task
static1
Behavioral task
behavioral1
Sample
f61596a1dff962fa9dc930f608ade32ce0715174362bc140256fdb10578a7033.exe
Resource
win7-20221111-en
General
-
Target
f61596a1dff962fa9dc930f608ade32ce0715174362bc140256fdb10578a7033
-
Size
275KB
-
MD5
0e1a99ffaad6ad581ff4a3275a9e7b67
-
SHA1
b442051dcb55b6e680f072283186eaa1c7e59b83
-
SHA256
f61596a1dff962fa9dc930f608ade32ce0715174362bc140256fdb10578a7033
-
SHA512
72b5f13140c8bb3a64e1d199593d0de332175869596588a15a7653ce15bb7df9055d788193bb2dfe30e1a79493cf3a0f4faa4864210c2e3ad5420513d77505af
-
SSDEEP
3072:UJBVjSN+WomNyI9NG7s2rI2uRerWpT/U6yvZX42TWALuKVyI9K3gxlUQh/AjdHoM:6SyWN126EWpAK2pZVj9K3mAj1nd
Malware Config
Signatures
Files
-
f61596a1dff962fa9dc930f608ade32ce0715174362bc140256fdb10578a7033.exe windows x86
e93f5037b9bfd14991412da1d9d1ef86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
KillTimer
LoadStringA
CharUpperA
PostThreadMessageA
EnumWindows
CharNextA
GetMessageA
MessageBoxA
GetWindowThreadProcessId
DispatchMessageA
IsWindowVisible
wsprintfW
SetTimer
PeekMessageA
GetWindowTextA
wsprintfA
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
GlobalAddAtomW
SetConsoleCtrlHandler
GetFileType
HeapDestroy
WriteFile
HeapCreate
GetOEMCP
VirtualFree
GetEnvironmentVariableA
WideCharToMultiByte
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetFilePointer
EnumResourceNamesA
IsBadWritePtr
FreeEnvironmentStringsA
IsBadCodePtr
GetCPInfo
GetEnvironmentStrings
GetStartupInfoA
GetDateFormatW
SetHandleCount
FatalAppExitA
GetACP
UnhandledExceptionFilter
VirtualAlloc
GetStdHandle
HeapReAlloc
IsBadReadPtr
SetUnhandledExceptionFilter
GetCurrentThread
Sections
.text Size: 139KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ