Static task
static1
Behavioral task
behavioral1
Sample
6ec7645e2cbbaf7d7d6c836cacf353c072bab4e785992c90b172f26263d55525.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
6ec7645e2cbbaf7d7d6c836cacf353c072bab4e785992c90b172f26263d55525.exe
Resource
win10v2004-20220414-en
General
-
Target
6ec7645e2cbbaf7d7d6c836cacf353c072bab4e785992c90b172f26263d55525
-
Size
13.9MB
-
MD5
3aaa4aecbe1e2646394602569e6cac7d
-
SHA1
191a54ac2bc0b727669fd08bb804fc7fd17601d5
-
SHA256
6ec7645e2cbbaf7d7d6c836cacf353c072bab4e785992c90b172f26263d55525
-
SHA512
7a36b8a7c2fd9189a3987e0ad1d109d3e81072546784d99719104f2359042285aaa2f9f0b4173effd6713b291813d9f08ae8804a87fb89bb0baea3b1fb20e86a
-
SSDEEP
196608:G//////////////////////////////////////////////////////////////f:
Malware Config
Signatures
Files
-
6ec7645e2cbbaf7d7d6c836cacf353c072bab4e785992c90b172f26263d55525.exe windows x86
ed393a07d0804aa83a60ff4d7112c39c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumDateFormatsExW
_llseek
GetDefaultCommConfigW
BuildCommDCBAndTimeoutsA
HeapAlloc
ClearCommError
SetConsoleTextAttribute
SetConsoleScreenBufferSize
SetCommBreak
SleepEx
GetModuleHandleW
GetWindowsDirectoryA
OpenProcess
EnumSystemCodePagesA
SetSystemPowerState
GetAtomNameW
EnumResourceLanguagesA
GetModuleFileNameW
MultiByteToWideChar
GetConsoleAliasesLengthW
DisconnectNamedPipe
EnumSystemLocalesA
FindFirstFileExA
GetLastError
GetLongPathNameW
GetProcAddress
SetFileApisToOEM
ProcessIdToSessionId
LocalAlloc
SetCalendarInfoW
SetConsoleOutputCP
SetProcessWorkingSetSize
FindAtomA
RequestWakeupLatency
FatalAppExitA
PeekConsoleInputA
lstrcpyW
lstrcpyA
WriteConsoleW
CreateFileW
lstrlenA
SetVolumeLabelA
GetVolumePathNameA
GetVolumeNameForVolumeMountPointA
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
ReadFile
GetCommandLineA
RaiseException
RtlUnwind
ExitProcess
GetModuleHandleExW
AreFileApisANSI
WideCharToMultiByte
HeapSize
EnterCriticalSection
LeaveCriticalSection
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
DeleteCriticalSection
CloseHandle
GetCurrentThreadId
GetProcessHeap
GetModuleFileNameA
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
LCMapStringW
SetStdHandle
FlushFileBuffers
GetConsoleCP
OutputDebugStringW
GetStringTypeW
SetEndOfFile
user32
GetCaretPos
advapi32
DeregisterEventSource
EnumServicesStatusA
CloseEventLog
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 749KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13.8MB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ