Static task
static1
Behavioral task
behavioral1
Sample
b6d824d4ec894192c5bf6726e51dfa8f2ff8cf1465ffb6839e77074e4df17c36.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b6d824d4ec894192c5bf6726e51dfa8f2ff8cf1465ffb6839e77074e4df17c36.exe
Resource
win10v2004-20220812-en
General
-
Target
b6d824d4ec894192c5bf6726e51dfa8f2ff8cf1465ffb6839e77074e4df17c36
-
Size
116KB
-
MD5
2c153ee551a706d307e8f9c6092a7b79
-
SHA1
11d36e6163504d8d9a3ca9f9efd1bbd454e40cf3
-
SHA256
b6d824d4ec894192c5bf6726e51dfa8f2ff8cf1465ffb6839e77074e4df17c36
-
SHA512
5dd4bef6ad4e15e39ac359e6d08fecfcfc222bd43464cec29e9a7d9a07f1255671a4f04dda311bf07a364a36541ae2060b759b160da483456d08ec9b9d42f7bc
-
SSDEEP
1536:D22Bov7kTK0LeUYrUoi5EhaBUERNt1GUW8rkXtth64mlp3IVddS+WADG6:D22BovIs/wNb6otgj8QXtv64VddWAB
Malware Config
Signatures
Files
-
b6d824d4ec894192c5bf6726e51dfa8f2ff8cf1465ffb6839e77074e4df17c36.exe windows x86
c945938b64809c22f99094cb820d5419
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
GetModuleFileNameExW
kernel32
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
CloseHandle
GetCurrentProcessId
DeviceIoControl
GetLastError
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileW
GetModuleFileNameW
OpenProcess
GetCurrentThreadId
FreeLibrary
GetSystemTimeAsFileTime
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
QueryPerformanceCounter
msvcr100
_snwprintf
_filelength
_read
_close
memset
_wsopen
_waccess
strtoul
_errno
realloc
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_invoke_watson
_controlfp_s
calloc
memcpy
malloc
free
_lseek
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE