Static task
static1
Behavioral task
behavioral1
Sample
6e035059fb129442c85b4505f868dba6ced55cf62bb6a79d486ebe678b0bf481.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e035059fb129442c85b4505f868dba6ced55cf62bb6a79d486ebe678b0bf481.exe
Resource
win10v2004-20220812-en
General
-
Target
6e035059fb129442c85b4505f868dba6ced55cf62bb6a79d486ebe678b0bf481
-
Size
120KB
-
MD5
4686b8adab3a3b376ca14069e7eb6aa0
-
SHA1
8230d60ad22f6918765f06422c92c26e8ce93e60
-
SHA256
6e035059fb129442c85b4505f868dba6ced55cf62bb6a79d486ebe678b0bf481
-
SHA512
956b4ae3620ed8ec172e1f5ccccd3cbe6f48cbd48b5cf037beb919a49dab039a8e5ab46de6f6e3b2000a88082b97138adf3a1408a34d030cf94ff17f6a2a4395
-
SSDEEP
768:gI9w2pDPL3ysiXPom+qpcPlzKF+g88Gh0o2qbkRkwcTYfxmR4g4Tae6:gcpDPepodr9zKF+JbkuCg/4+e6
Malware Config
Signatures
Files
-
6e035059fb129442c85b4505f868dba6ced55cf62bb6a79d486ebe678b0bf481.exe windows x86
cd50a33dbecbfd6396b69d6098daa635
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PulseEvent
GetLastError
WriteFile
GetProcAddress
GetModuleHandleW
CreateMutexW
GetCurrentThread
GetModuleHandleA
GetTickCount
CloseHandle
VirtualAlloc
ResumeThread
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
VirtualFree
Sleep
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
HeapCreate
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
GetStringTypeW
user32
SendMessageW
LoadCursorW
DestroyWindow
gdi32
SelectObject
CreatePen
winmm
auxSetVolume
winscard
SCardForgetCardTypeW
ws2_32
send
WSAGetLastError
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ