Static task
static1
Behavioral task
behavioral1
Sample
6b85abceea814bac850a6dd9472816db90e1259919a0f206239ee123ae73cb7d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b85abceea814bac850a6dd9472816db90e1259919a0f206239ee123ae73cb7d.exe
Resource
win10v2004-20220812-en
General
-
Target
6b85abceea814bac850a6dd9472816db90e1259919a0f206239ee123ae73cb7d
-
Size
299KB
-
MD5
67e90c38bf3d4f868cf1cc4a5f612230
-
SHA1
2da64c880e2329d66a2a7a4bd69de0b814ef32e9
-
SHA256
6b85abceea814bac850a6dd9472816db90e1259919a0f206239ee123ae73cb7d
-
SHA512
0da010ce77dd30f18543b1c553bc3a47351fd43ecf73e78c381187e9ab9a8ba40029a5d120c8f34167d78a96a7a7e670460a0f0feaadb4449b39414913c692fe
-
SSDEEP
6144:63QqI/8IV7hSMzHjQ29jZ6rRzLoCHocb1mlA1W9fPtE6q7f8l:Ks/z4ujIRPocUlAz6qL8
Malware Config
Signatures
Files
-
6b85abceea814bac850a6dd9472816db90e1259919a0f206239ee123ae73cb7d.exe windows x86
b94817150593d009e5fdd86947f5d54f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReleaseMutex
GetStartupInfoA
CopyFileW
GetFileSize
IsValidLocale
WriteConsoleW
lstrlenW
WriteConsoleW
GetFileAttributesA
WriteConsoleW
lstrcpyW
CreatePipe
HeapCreate
IsBadCodePtr
GetModuleHandleA
SetPriorityClass
IsBadStringPtrA
GetFileTime
GetLastError
CloseHandle
GetCurrentDirectoryA
msftedit
SetCustomTextOutHandlerEx
RichComboBoxWndProc
RichListBoxWndProc
RichEditWndProc
shell32
DragAcceptFiles
SHGetMalloc
ShellMessageBoxA
DragQueryFileA
SHGetMalloc
ShellAboutA
ShellAboutA
SHGetFileInfoA
StrChrA
ExtractIconA
SHGetSettings
DuplicateIcon
ShellMessageBoxA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ