Static task
static1
Behavioral task
behavioral1
Sample
6c4823d12db03e097cfedfac252f481b1cb5dc2927bd3051e40e616cf5c427ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6c4823d12db03e097cfedfac252f481b1cb5dc2927bd3051e40e616cf5c427ca.exe
Resource
win10v2004-20220901-en
General
-
Target
6c4823d12db03e097cfedfac252f481b1cb5dc2927bd3051e40e616cf5c427ca
-
Size
159KB
-
MD5
65086c872e171756a0d3b06cff00daa0
-
SHA1
18b7f0a2cb0d3cac47b4e60a1c4590350aa62547
-
SHA256
6c4823d12db03e097cfedfac252f481b1cb5dc2927bd3051e40e616cf5c427ca
-
SHA512
00f0d4784c466967bb308d58649aba2b509466c1788d6649f3d6e4946bd4096a444ae1db070f7aabc569b02385cac2b65a5ae8cb03c55356640709305ac7eba5
-
SSDEEP
3072:d+pg8wvJv6xKiDTZXhSwBfrEqvH5YVrnkmybyGFk0bZ21AXqX:KLRxpTZnxvCrkFhm00SaX
Malware Config
Signatures
Files
-
6c4823d12db03e097cfedfac252f481b1cb5dc2927bd3051e40e616cf5c427ca.exe windows x86
c078f1e83d6e466059e22c0303ab0bb9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
OpenMutexA
GetPrivateProfileIntW
GetPrivateProfileSectionA
DeleteFileA
GetFileAttributesA
GetCurrentThread
lstrlenA
GetStdHandle
CreateEventA
GetStringTypeA
GetDriveTypeA
GetVersionExA
DeviceIoControl
CloseHandle
LocalLock
HeapDestroy
HeapFree
VirtualProtectEx
GetCurrentProcess
LoadLibraryA
FindVolumeClose
shell32
ExtractIconA
ShellMessageBoxA
DragAcceptFiles
DragFinish
SHFree
SHGetSettings
DllUnregisterServer
StrChrA
ShellAboutA
SHGetMalloc
DuplicateIcon
SHFree
DragQueryFileA
odbccp32
SQLInstallDriver
SQLGetAvailableDrivers
SQLConfigDataSource
SQLInstallODBC
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ