Static task
static1
Behavioral task
behavioral1
Sample
c6b9549101f25ef2e5ca82d62a75bea5bbe644dc0a2745c4138cd2c4f79c9897.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6b9549101f25ef2e5ca82d62a75bea5bbe644dc0a2745c4138cd2c4f79c9897.exe
Resource
win10v2004-20220812-en
General
-
Target
c6b9549101f25ef2e5ca82d62a75bea5bbe644dc0a2745c4138cd2c4f79c9897
-
Size
115KB
-
MD5
644e2862849d97785b1f597ddfd7b7a7
-
SHA1
4ec7a73dc1981e791405ce8608a90490afd086e5
-
SHA256
c6b9549101f25ef2e5ca82d62a75bea5bbe644dc0a2745c4138cd2c4f79c9897
-
SHA512
3c9dad067fcb848218d53a5bb250e428bfdec38259b37a2ea650383951d87b59a7af4c022f85e2b7a336e7fd762f5f8b03bf2cbd6584b3ce4453177b3c2dea40
-
SSDEEP
1536:8Lyk2Dwg9Oo87LJUuscmMzn8e8ffiLUfh25cg3NywpiJP0Z96Skjyk850rFtODtH:871gMqtMINf552z9ywpo0Z9rbkzeV
Malware Config
Signatures
Files
-
c6b9549101f25ef2e5ca82d62a75bea5bbe644dc0a2745c4138cd2c4f79c9897.exe windows x86
7de9bdcf6cfbd5cc9ab17d0d97801221
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpyW
GetFileSize
GetModuleHandleA
IsBadCodePtr
CreatePipe
SetPriorityClass
GetFileTime
IsBadStringPtrA
GetLastError
GetCurrentDirectoryA
WriteConsoleW
GetStartupInfoA
IsValidLocale
CloseHandle
WriteConsoleW
GetFileAttributesA
WriteConsoleW
HeapCreate
CopyFileW
lstrlenW
ReleaseMutex
msftedit
SetCustomTextOutHandlerEx
RichComboBoxWndProc
RichEditWndProc
RichListBoxWndProc
shell32
ShellAboutA
SHGetMalloc
ExtractIconA
DragQueryFileA
StrChrA
ShellMessageBoxA
SHGetSettings
ShellMessageBoxA
SHGetMalloc
SHGetFileInfoA
DragAcceptFiles
DuplicateIcon
ShellAboutA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ