Static task
static1
Behavioral task
behavioral1
Sample
6b93de04031863f9c71903391236562b9f3e5e8de5b3990e634b55e9641f69d3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b93de04031863f9c71903391236562b9f3e5e8de5b3990e634b55e9641f69d3.exe
Resource
win10v2004-20220812-en
General
-
Target
6b93de04031863f9c71903391236562b9f3e5e8de5b3990e634b55e9641f69d3
-
Size
19KB
-
MD5
0654c7ece28ee21dc2ba4f3c74479264
-
SHA1
c81a24f8870afa972781b5dbf9366e6c160c867c
-
SHA256
6b93de04031863f9c71903391236562b9f3e5e8de5b3990e634b55e9641f69d3
-
SHA512
0bbb44aafd76b4eddc56559159bee222a59cc8f54e65f357224dcecdbf14169dbce2de1d3d4a16338dddfd540492a545a335674f8d465e37024e626ca71bbfab
-
SSDEEP
384:0jVcWEzNkpRoImp6KLEj/7V69Wx1WDk0SSs:6VwzdImp6KLsA0DAQ
Malware Config
Signatures
Files
-
6b93de04031863f9c71903391236562b9f3e5e8de5b3990e634b55e9641f69d3.exe windows x86
5cc87295c9fb7ad0001804aaffca5f88
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ExitProcess
GetModuleHandleW
GetStartupInfoA
LoadLibraryW
GetProcessHeap
RtlUnwind
IsDebuggerPresent
user32
wsprintfW
UpdateWindow
TranslateMessage
ShowWindow
SetWindowTextW
RegisterWindowMessageW
PeekMessageW
OpenClipboard
LoadIconW
IsZoomed
IsDialogMessageW
IsClipboardFormatAvailable
GetWindowPlacement
GetClipboardData
EnumChildWindows
EnableWindow
DispatchMessageW
DestroyWindow
CreateDialogParamW
CloseClipboard
CallNextHookEx
gdi32
CreateCompatibleDC
DeleteDC
CreateSolidBrush
CreateFontIndirectW
CreateDIBitmap
BitBlt
Escape
ExtTextOutW
GetDeviceCaps
GetStockObject
GetTextExtentPoint32W
TranslateCharsetInfo
TextOutW
StretchBlt
SetTextColor
SetStretchBltMode
SetBkColor
SelectObject
PatBlt
GetTextMetricsW
GetTextFaceW
GetTextExtentPointW
DeleteObject
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
te1xt1 Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ