Static task
static1
Behavioral task
behavioral1
Sample
6d492496058974a8460bca886c3cb306be0be3aa8b384bf63d628508cede4134.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d492496058974a8460bca886c3cb306be0be3aa8b384bf63d628508cede4134.exe
Resource
win10v2004-20220812-en
General
-
Target
6d492496058974a8460bca886c3cb306be0be3aa8b384bf63d628508cede4134
-
Size
279KB
-
MD5
8ff2d31ac54f18377bee4b319d21802c
-
SHA1
510d0022e42d5209f7c50182ef1f0e00b7301c67
-
SHA256
6d492496058974a8460bca886c3cb306be0be3aa8b384bf63d628508cede4134
-
SHA512
581299bda7516edf5822a0ce9769b351bca0c59742f1944bb7048d94625df83931ac99c31e31a3c158635a2e14fade33876d5d29f4f25932a5bd9d71e31df314
-
SSDEEP
6144:hmZI5IgQJQ1ZN+/yomZ2DxOr+QRxmu6X4Fg:4ZU1YQp+/yomZj13muQ4y
Malware Config
Signatures
Files
-
6d492496058974a8460bca886c3cb306be0be3aa8b384bf63d628508cede4134.exe windows x86
27a262375f9fe1b52d563dae86f0f338
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
GetSystemTime
HeapFree
GetFileType
RemoveDirectoryA
GetVersion
FindClose
ReleaseMutex
VirtualProtectEx
WriteFile
SetVolumeLabelW
SetEvent
FindAtomA
GetDriveTypeW
CreateEventA
IsBadCodePtr
RemoveDirectoryA
CreateMailslotA
GetCommandLineA
FindClose
SetStdHandle
CreateDirectoryA
WriteConsoleA
GetModuleHandleA
ExitThread
uxtheme
GetWindowTheme
DrawThemeBackground
GetThemeTextExtent
IsThemeActive
GetThemeRect
GetThemeTextMetrics
GetThemeSysSize
OpenThemeData
CloseThemeData
SetWindowTheme
DrawThemeEdge
GetThemeColor
CloseThemeData
rasmxs
DeviceEnum
DeviceEnum
DeviceEnum
DeviceEnum
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ