Static task
static1
Behavioral task
behavioral1
Sample
c6246c80cb4340428df2826e6b2bbbe7417f8824153ae94d855f57a491871248.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c6246c80cb4340428df2826e6b2bbbe7417f8824153ae94d855f57a491871248.exe
Resource
win10v2004-20220812-en
General
-
Target
c6246c80cb4340428df2826e6b2bbbe7417f8824153ae94d855f57a491871248
-
Size
144KB
-
MD5
b5bf712d21696db65b9a0cf0897c0c3d
-
SHA1
0feba0dec5aad11d2b7e3e1a89a238834c13c247
-
SHA256
c6246c80cb4340428df2826e6b2bbbe7417f8824153ae94d855f57a491871248
-
SHA512
b528539ea00e3ef6a0d9b6ec3b0604a99ff64263fa985319933016f7e9fd6bd279bcecbf1a920e455d5c341988c4716e0674d1a204c77a21a8bf253b5594dc86
-
SSDEEP
3072:ugL6Jvu2y4jWgsla5QJ5Z9SIvM3KTKxL:FDDlgsljJzbvM3gKx
Malware Config
Signatures
Files
-
c6246c80cb4340428df2826e6b2bbbe7417f8824153ae94d855f57a491871248.exe windows x86
193653f2070445a1dfbcf5776098558f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
CompareStringA
CloseHandle
Sleep
DeleteFileA
EnterCriticalSection
GetProcAddress
GetCommandLineW
lstrlenA
GetModuleHandleA
CreateFileA
CreateThread
ExitProcess
LoadLibraryA
ExitThread
CreateEventA
VirtualAlloc
DeleteCriticalSection
GetLastError
LoadLibraryExA
lstrlenW
VirtualAllocEx
GetModuleHandleW
shell32
SHGetDesktopFolder
Shell_NotifyIconA
SHFileOperationA
comctl32
ImageList_Read
ImageList_Draw
ImageList_Create
ImageList_Destroy
ImageList_DrawEx
user32
GetKeyNameTextA
LoadKeyboardLayoutA
FrameRect
comdlg32
FindTextA
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 898B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 870B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 186B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ