Static task
static1
Behavioral task
behavioral1
Sample
6aea8867382fdf27eefcabdfd5c105e4c99e23c36b89a71942432eabcbae4576.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6aea8867382fdf27eefcabdfd5c105e4c99e23c36b89a71942432eabcbae4576.exe
Resource
win10v2004-20220812-en
General
-
Target
6aea8867382fdf27eefcabdfd5c105e4c99e23c36b89a71942432eabcbae4576
-
Size
273KB
-
MD5
638e24a5229556a6d54994891568f570
-
SHA1
9b202178dbae2172ede2e33815cf959e56238682
-
SHA256
6aea8867382fdf27eefcabdfd5c105e4c99e23c36b89a71942432eabcbae4576
-
SHA512
72abb1fc243333dcaea628f5c18eadbf4054ee14e9a0d85956b6d1c5a5062dec5d6a27f69897e79bc80a4a29be1e19b8431fef45f5041b7604ce2a3d5f844818
-
SSDEEP
6144:Xba+lqslpl5xL6jQGYyMwSBob9KmD3ohNgiUcRK6:LmsnpL68ytSS9KE3fiZK
Malware Config
Signatures
Files
-
6aea8867382fdf27eefcabdfd5c105e4c99e23c36b89a71942432eabcbae4576.exe windows x86
776db239f6b5b6389f176a84d5f42970
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommProperties
TransmitCommChar
GetCurrentThread
CreateThread
HeapLock
VirtualUnlock
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetStdHandle
CopyFileExW
SetTapePosition
InterlockedExchangeAdd
InterlockedExchange
GlobalLock
WriteFileEx
GetSystemInfo
CreateHardLinkA
WriteProfileStringW
SetFileAttributesA
GetWindowsDirectoryA
GetShortPathNameW
GetFileSize
GetProcessWorkingSetSize
EndUpdateResourceA
VirtualAlloc
GetVersion
PulseEvent
MapViewOfFile
FindResourceA
ExpandEnvironmentStringsW
ReleaseSemaphore
GetModuleHandleW
FlushFileBuffers
LCMapStringW
LCMapStringA
CloseHandle
SetStdHandle
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
user32
SetWinEventHook
IsCharUpperA
GetMenu
GetMonitorInfoA
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ