Static task
static1
Behavioral task
behavioral1
Sample
6b1d7efc95f2dc40054e11853f63f20ce877d3913f9efb4ef4989d911c0cf6e4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b1d7efc95f2dc40054e11853f63f20ce877d3913f9efb4ef4989d911c0cf6e4.exe
Resource
win10v2004-20220812-en
General
-
Target
6b1d7efc95f2dc40054e11853f63f20ce877d3913f9efb4ef4989d911c0cf6e4
-
Size
211KB
-
MD5
6df00aed4e68346cfb521c590caef0c0
-
SHA1
3b1c1142909c451d12f5970cd9332d879bc07034
-
SHA256
6b1d7efc95f2dc40054e11853f63f20ce877d3913f9efb4ef4989d911c0cf6e4
-
SHA512
0c2973f387f6a8ac8b818ed0ec46a077894a1a882edd5c17542429806c27dfa4c2d4e037c9c3c5e98e919a8e828ba5f0a570790416835ead290263c32cdf7a34
-
SSDEEP
3072:Njb3DfTjOg5lFMNVNkDHAf+aA0mSG+HE6SdJVHoVxW24hg+Y6uAbnxezd/wEwkDl:N3yg3MNADAfdcv+V1yzUddtLDhG2ql63
Malware Config
Signatures
Files
-
6b1d7efc95f2dc40054e11853f63f20ce877d3913f9efb4ef4989d911c0cf6e4.exe windows x86
62d2f321bf18e78ff7952668d1168f3c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SearchPathA
GetFileSize
GetModuleHandleA
CancelIo
GetNamedPipeInfo
ReplaceFileW
SystemTimeToTzSpecificLocalTime
SetFileAttributesA
GetDriveTypeW
GetCommTimeouts
DebugActiveProcess
GetSystemDefaultUILanguage
FindAtomW
GetCPInfoExA
FindAtomA
TransactNamedPipe
CompareFileTime
FindFirstFileExA
GetWindowsDirectoryW
SetHandleInformation
DeleteTimerQueueEx
GetSystemInfo
ConvertDefaultLocale
CloseHandle
WaitCommEvent
SetPriorityClass
GetPriorityClass
CreateSemaphoreA
SetThreadPriority
QueueUserAPC
PeekNamedPipe
lstrlenA
EnumDateFormatsExA
GlobalMemoryStatus
GetThreadLocale
GetVolumePathNameA
CreateFileMappingA
GetOverlappedResult
user32
SetClipboardData
CloseClipboard
DdeQueryStringW
DdeUnaccessData
BroadcastSystemMessageA
RegisterClipboardFormatA
imm32
ImmEscapeA
Sections
.text Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size: 411B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.grdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE