Wfhgdlqqi
Static task
static1
Behavioral task
behavioral1
Sample
c6276f434168be8b11126e05dd578d13ce110ac4105a831b2be71da944cc0f25.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6276f434168be8b11126e05dd578d13ce110ac4105a831b2be71da944cc0f25.exe
Resource
win10v2004-20220901-en
General
-
Target
c6276f434168be8b11126e05dd578d13ce110ac4105a831b2be71da944cc0f25
-
Size
23KB
-
MD5
8913c28530e3b3f1d36dcc6b28472973
-
SHA1
eeff71b39b3c6d79a42b1013f120850725ca29e8
-
SHA256
c6276f434168be8b11126e05dd578d13ce110ac4105a831b2be71da944cc0f25
-
SHA512
d020797d928eeb9121ac2af1a8d65caed6b8ef39b719ec9375a5898421d5b575bcdcfb948984a01927ad7da6ea7882336126e286789111a21e6525f9520bc4c7
-
SSDEEP
384:oO+2rdfiH2u7Y6axXFqPEviqH5Btr/lffV+n2fvN7p305DPHzGxzjAhzvhk3DZ3:oO+2hfRx7ff0wHivIz+56
Malware Config
Signatures
Files
-
c6276f434168be8b11126e05dd578d13ce110ac4105a831b2be71da944cc0f25.exe windows x86
4dba9612cc9f3e7ecd55d82d7753b973
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
CloseHandle
MoveFileExA
VirtualProtectEx
ExitProcess
user32
CharUpperA
CheckMenuItem
EmptyClipboard
DeferWindowPos
Exports
Exports
Sections
.itext Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.lrq2lr Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lrq1lr Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ