Static task
static1
Behavioral task
behavioral1
Sample
6ec7a74a5657390b63215d91b5c8d7231c4cf8b05ac63e34aa2c904165c6d4f9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6ec7a74a5657390b63215d91b5c8d7231c4cf8b05ac63e34aa2c904165c6d4f9.exe
Resource
win10v2004-20220812-en
General
-
Target
6ec7a74a5657390b63215d91b5c8d7231c4cf8b05ac63e34aa2c904165c6d4f9
-
Size
137KB
-
MD5
49a205520e83c463d78bcb52ca32f370
-
SHA1
9cfb12caf2183425ff133e9a02b91afb40100822
-
SHA256
6ec7a74a5657390b63215d91b5c8d7231c4cf8b05ac63e34aa2c904165c6d4f9
-
SHA512
edda8d7fa1b8ce8e29a014512b3fb1a0c67556af21caf9b1cdc0b3aacbd466d5cba7ce07462ffa6d15ffd848dd4981fa6e4a63363a53ee5f4084398228da9664
-
SSDEEP
3072:C8WD3sV08yGHWqSVlLQXlxJxYyFo69L6NMu3HVkukeKx:SqIlLkHJOR69Nu3HmukeKx
Malware Config
Signatures
Files
-
6ec7a74a5657390b63215d91b5c8d7231c4cf8b05ac63e34aa2c904165c6d4f9.exe windows x86
8b369a65440fd3c220a7576979bffd13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LocalLock
IsBadWritePtr
RemoveDirectoryW
GetLocaleInfoW
GetModuleHandleA
HeapFree
IsValidCodePage
CreateDirectoryW
FindClose
TlsGetValue
GetFileAttributesA
GetTickCount
FindResourceW
MapViewOfFile
GetDriveTypeW
VirtualProtect
GetExitCodeThread
SetLastError
GetFileAttributesA
GetStringTypeA
GetCurrentProcess
user32
LoadStringA
wsprintfW
SetCursor
GetWindowLongW
LoadImageW
GetWindowTextW
SetFocus
DispatchMessageA
IsDialogMessageA
PostMessageW
IsWindow
PeekMessageW
LoadCursorA
msctf
DllUnregisterServer
TF_InitSystem
DllUnregisterServer
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE