Static task
static1
Behavioral task
behavioral1
Sample
6e328adcf15c3f9e56974e2f74d7683c7f4c20b21ece473df115bc1acbc381b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e328adcf15c3f9e56974e2f74d7683c7f4c20b21ece473df115bc1acbc381b8.exe
Resource
win10v2004-20220901-en
General
-
Target
6e328adcf15c3f9e56974e2f74d7683c7f4c20b21ece473df115bc1acbc381b8
-
Size
301KB
-
MD5
618534f6891e49de018f0de2828c6820
-
SHA1
20b04be9cf3e9efc918fdae7277da7b935194744
-
SHA256
6e328adcf15c3f9e56974e2f74d7683c7f4c20b21ece473df115bc1acbc381b8
-
SHA512
d322ad143ead96555e28c13246d62ece9688e0019d9dd91748045f8a41e5acc277b3a0e1f6602b2d21c570f38812163288c76e6294771e2b3e1070bd0468a281
-
SSDEEP
6144:/aWnebXgqrIKeWlX6QE36/S4+sxpyYEfhPUR3Ip:hebX9rIKeWNXEK/S4cpM+p
Malware Config
Signatures
Files
-
6e328adcf15c3f9e56974e2f74d7683c7f4c20b21ece473df115bc1acbc381b8.exe windows x86
d603f99e0e4aeee2df58145feed52305
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetExitCodeThread
SetLastError
FindResourceA
FindClose
VirtualProtect
GetStringTypeA
GetTickCount
GetModuleHandleA
HeapSize
GetFileAttributesA
MapViewOfFile
CreateDirectoryW
IsBadWritePtr
LocalLock
IsValidCodePage
GetCurrentProcess
TlsGetValue
GetFileAttributesA
GetLocaleInfoA
RemoveDirectoryW
GetDriveTypeW
user32
GetWindowTextW
DispatchMessageA
LoadCursorA
wsprintfW
GetWindowLongW
GetCapture
LoadImageW
IsWindow
IsDialogMessageA
PostMessageW
SetCursor
SetFocus
PeekMessageW
msaatext
DllUnregisterServer
DllGetClassObject
DllUnregisterServer
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE