Static task
static1
Behavioral task
behavioral1
Sample
b61c697ca1f629d04579394f8d626e643a7966d155058bdefd5cc39479ece19b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b61c697ca1f629d04579394f8d626e643a7966d155058bdefd5cc39479ece19b.exe
Resource
win10v2004-20220901-en
General
-
Target
b61c697ca1f629d04579394f8d626e643a7966d155058bdefd5cc39479ece19b
-
Size
28KB
-
MD5
955833b550e505cb4d77261782127281
-
SHA1
0f85c9ec739e656aa9648d42a58b30209b73c47c
-
SHA256
b61c697ca1f629d04579394f8d626e643a7966d155058bdefd5cc39479ece19b
-
SHA512
688ab0df42a34122325659d94e39736829352c6de7909b41c39448fa3bdfbd984d9a965fc5c3c4f02044fbcd995a811a29307e66ddb4e34253c1066b10c0513e
-
SSDEEP
192:4NFCd6P1oyn050HVGr7ZbDBCSzQ5uWdQRz7t1hvF:0FCdE1WWHSjCOWuVt
Malware Config
Signatures
Files
-
b61c697ca1f629d04579394f8d626e643a7966d155058bdefd5cc39479ece19b.exe windows x86
02cb69f7c24f40f1ecfb6650df2b8f39
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VerSetConditionMask
HeapAlloc
GetProcessHeap
CreateFileA
DeleteFileA
GetBinaryTypeA
GetFileSize
CloseHandle
ReadFile
GetModuleHandleA
GetStartupInfoA
gdi32
DeleteDC
GetObjectType
whgvlbzwde
ord1
inmvonwop
ord1
nvtvdizrpdcr
ord1
msvcrt
__setusermatherr
_controlfp
_ftol
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
??2@YAPAXI@Z
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
Sections
.text Size: 4KB - Virtual size: 882B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 958B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ