Static task
static1
Behavioral task
behavioral1
Sample
6b7cf3d3dd18e59f099bdd83a9aec1c0752f6e90f409bb0944c15a992d546ea1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b7cf3d3dd18e59f099bdd83a9aec1c0752f6e90f409bb0944c15a992d546ea1.exe
Resource
win10v2004-20220812-en
General
-
Target
6b7cf3d3dd18e59f099bdd83a9aec1c0752f6e90f409bb0944c15a992d546ea1
-
Size
2.6MB
-
MD5
8942fd23de96cacd33edc0049f791455
-
SHA1
7162077ee761e227955c60df73a5b303fd594bcf
-
SHA256
6b7cf3d3dd18e59f099bdd83a9aec1c0752f6e90f409bb0944c15a992d546ea1
-
SHA512
78b3fe82fcce4fe8b06f1d59bdb567ba64830f598fb9d01dd6d6c3fdd3eac6fdcdb55cf6d8ef315328668e3fa0b88bfa88255c81c1664f53dea4b3800a6f10a4
-
SSDEEP
49152:y1p/OxkU6geNew+28KnLMllwUuG0BMqXI7T+Z65TcO1nXsR:aBOxklFP+6nLclw5nuqmf5TX18R
Malware Config
Signatures
Files
-
6b7cf3d3dd18e59f099bdd83a9aec1c0752f6e90f409bb0944c15a992d546ea1.exe windows x86
15c33583ef8e2d58f2ce8dafe42f09a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
winmm
midiStreamOut
ws2_32
sendto
rasapi32
RasHangUpA
kernel32
GetSystemDirectoryA
user32
SetMenu
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Add
wininet
InternetCanonicalizeUrlA
comdlg32
GetFileTitleA
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 1012KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ