Static task
static1
Behavioral task
behavioral1
Sample
6084b1295322d6819a1f59dd7f97779074ad3effa507f849d52a9059e6ec9725.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6084b1295322d6819a1f59dd7f97779074ad3effa507f849d52a9059e6ec9725.exe
Resource
win10v2004-20220812-en
General
-
Target
6084b1295322d6819a1f59dd7f97779074ad3effa507f849d52a9059e6ec9725
-
Size
219KB
-
MD5
6f7b4d78cdcf77b2d9f2a2394d748b40
-
SHA1
a92a49ffd9d3f037d7d914e39c78c63168b45ab5
-
SHA256
6084b1295322d6819a1f59dd7f97779074ad3effa507f849d52a9059e6ec9725
-
SHA512
0ab9d337472da01137f2c9e2f6a2f5060ac27ae7f34c14724a9b5a66790c2acda3921e7b7897f453ff660a0b0a15a9c68a3878454d1d5b95fe215f7be63b761f
-
SSDEEP
3072:d3tsOQyatxx6EuHPki05WuxEyIslrbZZiPZcnX2UChWOdX4vw:d3tsOtCxx1/W+IsZbeP+2nZ4Y
Malware Config
Signatures
Files
-
6084b1295322d6819a1f59dd7f97779074ad3effa507f849d52a9059e6ec9725.exe windows x86
c97cafd91f77592d0f0c5dd3a6c5eb6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFolderPathW
kernel32
GetVersionExW
MulDiv
FreeLibrary
LoadLibraryA
lstrlenA
SizeofResource
GetCurrentThreadId
HeapAlloc
FlushInstructionCache
GetCurrentProcess
LoadLibraryExA
GetModuleHandleA
InterlockedDecrement
CloseHandle
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
GetSystemTimeAsFileTime
GetCurrentProcessId
InterlockedIncrement
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
RaiseException
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetTickCount
QueryPerformanceCounter
WriteFile
ole32
CoRegisterMallocSpy
OleIsCurrentClipboard
GetErrorInfo
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ