Static task
static1
Behavioral task
behavioral1
Sample
61fdc1180a2eb002032274190f49bdfd.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
61fdc1180a2eb002032274190f49bdfd.exe
Resource
win10v2004-20230220-en
General
-
Target
61fdc1180a2eb002032274190f49bdfd
-
Size
140KB
-
MD5
61fdc1180a2eb002032274190f49bdfd
-
SHA1
a13d6b6cc24f5b45e1df6e8041966f11a6265056
-
SHA256
3aa382796490aa8e31eef0cd013321edd33d9f4178e12829ecc02959c895ee1c
-
SHA512
ffbf81790c2c4b77689cc132fe9a594f59bb3bb9b9070156b72d240270a78079167b4c5a9e37c269dcfe41ad688857f6dff3267206629ed4e6a956bf0c607947
-
SSDEEP
1536:h840UmJc+IMPP9cYRco0UB8tHul3i6EBX:hXbhQPPNRco01u
Malware Config
Signatures
Files
-
61fdc1180a2eb002032274190f49bdfd.exe windows x86
56456268e7fe5b0b2ec5c32eeb226d91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathW
CloseHandle
CreateProcessW
GetWindowsDirectoryW
GetModuleFileNameW
GetFileAttributesW
GetFileAttributesA
SetFileAttributesW
UnmapViewOfFile
WriteFile
MapViewOfFile
CreateFileMappingW
GetFileSize
DeleteFileW
lstrlenA
GetModuleFileNameA
WaitForSingleObject
GetDriveTypeA
GetVolumeInformationA
MultiByteToWideChar
GetSystemTime
lstrcpyA
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
WideCharToMultiByte
GetComputerNameA
CreateDirectoryW
lstrcpynW
GetSystemDirectoryW
SetFileTime
SystemTimeToFileTime
lstrcatW
ExitProcess
FileTimeToSystemTime
GetFileTime
CreateFileA
GetLongPathNameA
GetTempPathA
FindClose
GetLastError
FindNextFileA
FindFirstFileA
Sleep
SetErrorMode
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
SetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
GetTimeZoneInformation
LCMapStringW
LCMapStringA
RtlUnwind
HeapFree
CopyFileA
CreateFileW
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FileTimeToLocalFileTime
FindFirstFileW
FindNextFileW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
user32
wsprintfA
TranslateMessage
DispatchMessageA
DefWindowProcA
KillTimer
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
SetTimer
GetMessageA
CreateWindowExA
gdi32
GetStockObject
shell32
StrStrIA
SHChangeNotify
SHGetSpecialFolderPathA
ole32
CoInitialize
CoCreateInstance
shlwapi
PathQuoteSpacesA
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE