Static task
static1
Behavioral task
behavioral1
Sample
6853ee5d264b44dae781f2a9c8792be58db8eb82d5ab73bb0b99328088d48f62.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6853ee5d264b44dae781f2a9c8792be58db8eb82d5ab73bb0b99328088d48f62.exe
Resource
win10v2004-20220812-en
General
-
Target
6853ee5d264b44dae781f2a9c8792be58db8eb82d5ab73bb0b99328088d48f62
-
Size
182KB
-
MD5
6d2dc73ed5e78b806f873f716690a8f0
-
SHA1
fac4eb501c2e56380d52e693ad3973aaf331c88f
-
SHA256
6853ee5d264b44dae781f2a9c8792be58db8eb82d5ab73bb0b99328088d48f62
-
SHA512
54e8f803d256a9e952e881435fb427872d41f1222618b000f9777d815fb6b17bca33d3a27f93d8f34593b260b81522cfa9ccf58aa15faf7138cc7dfd7335b171
-
SSDEEP
3072:V361cAP6LH/7MWPD0lG6pLSKWEUI8wlT0By49KkON4I162j4nZh5/wdlQK7MAZ7:V3fASrT9ENLS0j0x5ircqQ3w
Malware Config
Signatures
Files
-
6853ee5d264b44dae781f2a9c8792be58db8eb82d5ab73bb0b99328088d48f62.exe windows x86
2ce758be07e88595d2aaed86aaa4ef47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommProperties
GetCommandLineA
GetCurrentProcess
GetEnvironmentStringsW
GetLastError
GetModuleHandleA
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
FreeLibrary
MultiByteToWideChar
RtlUnwind
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
_lread
lstrcpyA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LoadLibraryA
ExitProcess
shell32
SHOpenFolderAndSelectItems
SHCreateProcessAsUserW
SHSetUnreadMailCountW
gdi32
ChoosePixelFormat
CombineTransform
Arc
Sections
.text Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ