Static task
static1
Behavioral task
behavioral1
Sample
c6dfbea3e25d54470b8811c86a10d817924df00a206420e1106d0585e91f8942.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6dfbea3e25d54470b8811c86a10d817924df00a206420e1106d0585e91f8942.exe
Resource
win10v2004-20220812-en
General
-
Target
c6dfbea3e25d54470b8811c86a10d817924df00a206420e1106d0585e91f8942
-
Size
400KB
-
MD5
6627f157530abeeafde032d4b7039d4a
-
SHA1
ad7c4820aee7409007d192114413e9d10d89dc93
-
SHA256
c6dfbea3e25d54470b8811c86a10d817924df00a206420e1106d0585e91f8942
-
SHA512
c662651ac0eceda50ae56a5fc90c6f6079a48612f82ceadfbe6c922cfabcb66f862db050693085f726ac8488f6e3ba4abac7fe48479dcb1c1c9497bd8a872502
-
SSDEEP
12288:bWtCYuQVxIDmWiPmzvM/7w2p4KvrAPuMjPZqwMQyeESovnx3:S9u2IDmVP8v+7LHAPuMjBqXr9v
Malware Config
Signatures
Files
-
c6dfbea3e25d54470b8811c86a10d817924df00a206420e1106d0585e91f8942.exe windows x86
b9c909f857acbe398d8a69ceb5fd842a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
LoadLibraryW
GetStartupInfoA
GetModuleHandleW
GetCurrentThreadId
GetCommandLineA
GetCommandLineA
VirtualAlloc
SetEvent
GetTickCount
FreeLibrary
InterlockedDecrement
FreeLibrary
GetTickCount
GetStartupInfoA
WriteFile
SetUnhandledExceptionFilter
LocalAlloc
lstrcmpiW
LocalAlloc
GetLastError
WideCharToMultiByte
DeleteCriticalSection
lstrlenW
WaitForSingleObject
HeapAlloc
LoadLibraryA
GetProcessHeap
VirtualAlloc
FreeLibrary
GetCommandLineW
GetSystemTimeAsFileTime
GetStartupInfoW
ReadFile
user32
GetWindowLongW
GetSysColor
DialogBoxParamW
EnableMenuItem
SetFocus
LoadStringA
GetSubMenu
SetDlgItemTextW
UpdateWindow
DispatchMessageA
GetWindowTextW
SetWindowTextW
ReleaseDC
SetWindowPos
LoadStringW
EnableMenuItem
SendMessageW
CreateDialogParamW
GetSystemMenu
EnableWindow
DispatchMessageA
LoadStringA
TranslateMessage
GetSystemMetrics
SetTimer
GetSystemMenu
PtInRect
GetMenu
LoadStringW
IsWindowVisible
DialogBoxParamW
SetForegroundWindow
PostMessageW
DispatchMessageA
ReleaseDC
LoadStringW
GetSysColor
FillRect
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 387KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ