Static task
static1
Behavioral task
behavioral1
Sample
c6c85d38bd4087d8b4b3fc9f7a333e5779dfd428c66ac92817f7cc6bb34a9c01.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c6c85d38bd4087d8b4b3fc9f7a333e5779dfd428c66ac92817f7cc6bb34a9c01.exe
Resource
win10v2004-20220812-en
General
-
Target
c6c85d38bd4087d8b4b3fc9f7a333e5779dfd428c66ac92817f7cc6bb34a9c01
-
Size
92KB
-
MD5
3f1ab166ac4c35de94744df0d86bc97b
-
SHA1
7d979c23face192d9c93b852b8b519bce2431646
-
SHA256
c6c85d38bd4087d8b4b3fc9f7a333e5779dfd428c66ac92817f7cc6bb34a9c01
-
SHA512
199d91cc3dc6783f7806fa97346cf69ba0c0e20142ef52fa8245d56b35890e7e44a7a3c4af376a3f6669066b9a71f9b6844bb1b3f3f8ebeba14890e7fdbb14fe
-
SSDEEP
1536:4cFLNbY8Isk95zoAWz3MADys2cthIYM770UoxOJdnrmB7eqD:4AFBS5zoAYM7FaEdnrmVeq
Malware Config
Signatures
Files
-
c6c85d38bd4087d8b4b3fc9f7a333e5779dfd428c66ac92817f7cc6bb34a9c01.exe windows x86
90b2257b3832febdb229ce3bbabb456d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
Sleep
MoveFileA
CreateThread
VirtualFree
GetFileAttributesA
GetThreadLocale
MulDiv
GetStringTypeW
ResetEvent
LoadLibraryA
FindClose
GetLocaleInfoA
GetStartupInfoA
SetHandleCount
lstrlenA
HeapFree
VirtualAlloc
LoadResource
EnumCalendarInfoA
GetOEMCP
GetUserDefaultLCID
GetVersion
GetModuleHandleA
GetCommandLineA
GetFileType
ExitProcess
CloseHandle
FindResourceA
FreeLibrary
user32
BeginPaint
GetMenuStringA
GetSysColor
EndDeferWindowPos
CreatePopupMenu
IsChild
GetSysColorBrush
GetFocus
GetDlgItem
GetClipboardData
GetScrollPos
DrawIconEx
IsWindowVisible
GetDCEx
DefFrameProcA
IsMenu
DrawFrameControl
GetScrollRange
SetCursor
GetClassInfoA
DeferWindowPos
GetMenuItemInfoA
GetClassLongA
GetCursorPos
EqualRect
DrawTextA
CheckMenuItem
DrawMenuBar
EndPaint
ShowWindow
DispatchMessageA
SetWindowTextA
GetLastActivePopup
IsWindowEnabled
GetIconInfo
EnableWindow
DefMDIChildProcA
CallWindowProcA
DrawEdge
CharNextA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 68KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ