Static task
static1
Behavioral task
behavioral1
Sample
6cd2a1ef915859f2e6cfaddfcc876c98.exe
Resource
win7-20220223-en
General
-
Target
6cd2a1ef915859f2e6cfaddfcc876c98
-
Size
597KB
-
MD5
6cd2a1ef915859f2e6cfaddfcc876c98
-
SHA1
9c8975025e9553c08546695b98e8b6987251def2
-
SHA256
33ac0ea43c425209053f9360bd243e68deca0eb5cb4e638c6da557eb36f78935
-
SHA512
7862d7cda69e3d2c820551214caa24b96148863c3139af0406b953820554886d29741f15a4a81945e22f79039824f56c52ece0e43a55eefcca755a6cd6502a05
Malware Config
Signatures
Files
-
6cd2a1ef915859f2e6cfaddfcc876c98.exe windows x86
0623e16f7ad169cff85e84a96d4a7da6
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindActCtxSectionGuid
SetVolumeMountPointW
GetConsoleAliasesA
GetConsoleTitleA
SetFileTime
GetEnvironmentStrings
GetPrivateProfileIntA
GlobalFindAtomA
LoadLibraryW
GetLocaleInfoW
LeaveCriticalSection
HeapValidate
ReplaceFileW
GetAtomNameW
GetVolumePathNameA
LCMapStringA
SetFilePointer
GetLastError
GetProcAddress
VirtualAlloc
WriteProfileSectionA
SetStdHandle
SetComputerNameA
WriteConsoleA
LocalAlloc
SetCalendarInfoW
BeginUpdateResourceA
GetModuleFileNameA
GetDefaultCommConfigA
SetConsoleTitleW
GetModuleHandleA
GetFileTime
LocalFree
GetStdHandle
FindFirstChangeNotificationW
GetStartupInfoW
HeapAlloc
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapFree
CloseHandle
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CreateFileA
Sections
.text Size: 544KB - Virtual size: 543KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ