Static task
static1
Behavioral task
behavioral1
Sample
61b52f26a3b78fe9f192b5ef66bdaf5cc1cf544433646e38d829b9cac90a27bb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
61b52f26a3b78fe9f192b5ef66bdaf5cc1cf544433646e38d829b9cac90a27bb.exe
Resource
win10v2004-20221111-en
General
-
Target
61b52f26a3b78fe9f192b5ef66bdaf5cc1cf544433646e38d829b9cac90a27bb
-
Size
242KB
-
MD5
e154d989ebce979191f9f202174c18dd
-
SHA1
9c19321ddaa18975040a6db3cb12bfb0d630aea9
-
SHA256
61b52f26a3b78fe9f192b5ef66bdaf5cc1cf544433646e38d829b9cac90a27bb
-
SHA512
618e06726b77eaf8e70f8789caa26437870d227c97f7b7a413d9d7912f0e307bd5f1a1a3d7e93dc0ff6ec1812100ed76f540d3d4531949d6d98763d4b16d446f
-
SSDEEP
6144:0XElKYAGBzf4AtCirycBdr7/rryUNYQvN:0XElKMr4AjrywrWSY6
Malware Config
Signatures
Files
-
61b52f26a3b78fe9f192b5ef66bdaf5cc1cf544433646e38d829b9cac90a27bb.exe windows x86
25a8164eab592477f82700ee1267c0e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
comdlg32
GetOpenFileNameA
GetOpenFileNameW
oleaut32
SysStringByteLen
VariantCopy
VariantClear
SysAllocString
ole32
CoInitialize
CoUninitialize
user32
DialogBoxParamW
DialogBoxParamA
SetWindowLongA
GetWindowLongA
GetWindowRect
MoveWindow
SystemParametersInfoA
GetWindowTextLengthW
GetWindowTextW
GetWindowTextLengthA
GetWindowTextA
SetWindowTextW
SendMessageW
LoadStringW
InvalidateRect
CharPrevA
CharUpperW
CharUpperA
LoadIconA
IsWindowEnabled
SetWindowTextA
IsDlgButtonChecked
ShowWindow
CheckDlgButton
MessageBoxW
wsprintfA
KillTimer
EndDialog
EnableWindow
SetDlgItemTextA
GetDlgItem
SendMessageA
SetTimer
PostMessageA
LoadCursorA
ScreenToClient
MapDialogRect
SetCursor
LoadStringA
advapi32
RegOpenKeyExA
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegDeleteValueW
RegDeleteValueA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHGetMalloc
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
memset
_iob
wcsncmp
free
malloc
memcpy
wcslen
memcmp
_purecall
memmove
_CxxThrowException
__CxxFrameHandler
_isatty
_controlfp
_fileno
kernel32
SetPriorityClass
WaitForMultipleObjects
GetDriveTypeA
FileTimeToLocalFileTime
GetProcessTimes
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
OpenEventA
GetStdHandle
GetSystemTime
SystemTimeToFileTime
FileTimeToDosDateTime
GetModuleHandleA
GlobalMemoryStatus
GetSystemInfo
GetModuleHandleW
FileTimeToSystemTime
CompareFileTime
GetProcAddress
GetCurrentProcess
VirtualAlloc
WriteFile
ReadFile
DeviceIoControl
SetFilePointer
GetFileSize
CreateFileA
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
GetTempFileNameW
GetTempFileNameA
GetTempPathW
GetTempPathA
SearchPathW
SearchPathA
GetCurrentDirectoryW
SetCurrentDirectoryW
SetCurrentDirectoryA
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
InitializeCriticalSection
GetStartupInfoA
MoveFileW
SetEndOfFile
GetCurrentDirectoryA
GetFullPathNameW
GetFullPathNameA
lstrlenA
DeleteFileW
DeleteFileA
CreateDirectoryW
RemoveDirectoryW
SetFileAttributesW
MoveFileA
RemoveDirectoryA
SetFileAttributesA
SetLastError
CreateFileW
SetFileTime
CloseHandle
GetWindowsDirectoryW
GetWindowsDirectoryA
FormatMessageW
FormatMessageA
LocalFree
GetModuleFileNameW
GetModuleFileNameA
AreFileApisANSI
LoadLibraryA
LoadLibraryExA
FreeLibrary
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetVersionExA
DeleteCriticalSection
Sleep
GetTickCount
lstrcatA
LeaveCriticalSection
EnterCriticalSection
CreateDirectoryA
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.grdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE