Static task
static1
Behavioral task
behavioral1
Sample
6cb85e7b6966619b4069d83a310f96db079338071aa1bee033be227afc1811c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6cb85e7b6966619b4069d83a310f96db079338071aa1bee033be227afc1811c8.exe
Resource
win10v2004-20220812-en
General
-
Target
6cb85e7b6966619b4069d83a310f96db079338071aa1bee033be227afc1811c8
-
Size
368KB
-
MD5
1cee127386a92d8c1e26170ec4dd9ecf
-
SHA1
a5dd14b18e3b21bd190b5df6951d507856392b8f
-
SHA256
6cb85e7b6966619b4069d83a310f96db079338071aa1bee033be227afc1811c8
-
SHA512
14b796692ca7c79b8d2ce6e8b82e70b9376d7f54b09355ff8fd3e4e8a07846c8970a2a380027b3be4bd6f9bbad15f4712027445fae635ad30fd7ab06843702a8
-
SSDEEP
6144:UG4RMyhrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:UVRMMrpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
Files
-
6cb85e7b6966619b4069d83a310f96db079338071aa1bee033be227afc1811c8.exe windows x86
788abc9f6448e4bd7e791d49530a4e10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
GetPrivateProfileStringW
FindClose
CreateEventW
SetLastError
GetCurrentThreadId
EnumCalendarInfoW
FindAtomW
GetCurrentProcessId
GetConsoleAliasW
HeapCreate
GetModuleHandleA
TlsGetValue
GetDriveTypeW
EnterCriticalSection
LocalFree
ReadFile
ResumeThread
GetNumberFormatW
lstrlenW
user32
GetClientRect
IsWindow
GetCursorInfo
GetClassInfoA
DispatchMessageA
CallWindowProcW
GetMenuInfo
DispatchMessageA
GetSysColor
GetKeyState
GetKeyboardType
DrawTextA
SetFocus
unimdmat
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ