Static task
static1
Behavioral task
behavioral1
Sample
c61284a6b60fc5d8cfe2d1b1f3efc636d73f61b7260d05337d71d05073609d8b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c61284a6b60fc5d8cfe2d1b1f3efc636d73f61b7260d05337d71d05073609d8b.exe
Resource
win10v2004-20221111-en
General
-
Target
c61284a6b60fc5d8cfe2d1b1f3efc636d73f61b7260d05337d71d05073609d8b
-
Size
73KB
-
MD5
8f9143e60ee3b12fe413692ffa1fb500
-
SHA1
e99ef2afa2bade0726bd2bc55ed8eca5943325ff
-
SHA256
c61284a6b60fc5d8cfe2d1b1f3efc636d73f61b7260d05337d71d05073609d8b
-
SHA512
d835d8bbdd62df90be5710683661c60a0e69ebcdfdac02a649605333d0d1135121cd3d1d156ceded791f9cf0f0d532ce42fc63ae4746eec144bf95c01891a995
-
SSDEEP
1536:EHa4dO5iV/M7NoQf+c5tFKhEQ7BnLY10:EHvs5Tlf+cLcSQ7B
Malware Config
Signatures
Files
-
c61284a6b60fc5d8cfe2d1b1f3efc636d73f61b7260d05337d71d05073609d8b.exe windows x86
c5bb4ac99157bd67403ead6fbf06d06e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetTimeFormatA
GetProcessHeap
GetCurrentDirectoryA
GetVolumeInformationA
GetPrivateProfileIntW
ReadConsoleW
GetEnvironmentVariableW
WriteFile
HeapFree
lstrcatA
GetModuleHandleA
CreateMailslotW
GetDiskFreeSpaceW
CompareStringW
lstrcmpW
GetFileType
VirtualProtectEx
GetSystemTime
GetLastError
dsdmo
DllGetClassObject
DllUnregisterServer
DllCanUnloadNow
DllRegisterServer
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ