Static task
static1
Behavioral task
behavioral1
Sample
f6c1878be6d591d24697b536147379b9bcea0f74996b1e5322a27ce9d3f8fdbd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f6c1878be6d591d24697b536147379b9bcea0f74996b1e5322a27ce9d3f8fdbd.exe
Resource
win10v2004-20220901-en
General
-
Target
f6c1878be6d591d24697b536147379b9bcea0f74996b1e5322a27ce9d3f8fdbd
-
Size
328KB
-
MD5
65b1554a2b3417159e027fa15e852192
-
SHA1
aaffa0cd88f07a420b2550cec60023c25c806405
-
SHA256
f6c1878be6d591d24697b536147379b9bcea0f74996b1e5322a27ce9d3f8fdbd
-
SHA512
49bf8175d6368314efecaff6e9b10c2c3920dc5463fe7bbf424067a6c20e1334d493b1a708241ecf6a2bcdc3ab7b2e12a227620e5ffb720156e4e2ee23d55e7a
-
SSDEEP
3072:/sctEesJiRWolhLxRTxsiyuRdqM2lQ19qYQ+SYZuixON4qSaXdo9LGBstpz46D0Y:/sIH3LL9qYqCZTVqSa+9L3F2kBiiMas
Malware Config
Signatures
Files
-
f6c1878be6d591d24697b536147379b9bcea0f74996b1e5322a27ce9d3f8fdbd.exe windows x86
9d6f2956fb48f31d777b3ee2643ea4ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
WinExec
WritePrivateProfileStringA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
WriteFile
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ