Static task
static1
Behavioral task
behavioral1
Sample
6d2a2178b93ebbf3d20927819f16743d51fce450cb88e1416c50f070039370c4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6d2a2178b93ebbf3d20927819f16743d51fce450cb88e1416c50f070039370c4.exe
Resource
win10v2004-20220812-en
General
-
Target
6d2a2178b93ebbf3d20927819f16743d51fce450cb88e1416c50f070039370c4
-
Size
109KB
-
MD5
6e87ac5e62d450297c99ef20e3c24e00
-
SHA1
34545ebf0e674ffc4735d6422c0aa7a4ede5c78e
-
SHA256
6d2a2178b93ebbf3d20927819f16743d51fce450cb88e1416c50f070039370c4
-
SHA512
cfd2d8aebf4d76a24db779e92359c1b116193fb31bde5a69a985cff62596b03d21a39174f500bd67857604c2817ac74687fb69d13d540eeb89f679e9a7ea9a3d
-
SSDEEP
3072:Pvel+VYNR2F118iODvLV2y2EMyLHoWxQtnHonPi2YWIN:P2gzkrTV2yrLaHoqw
Malware Config
Signatures
Files
-
6d2a2178b93ebbf3d20927819f16743d51fce450cb88e1416c50f070039370c4.exe windows x86
c865a0bad25383083631976222d85271
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CopyFileA
GetStartupInfoA
GetCommandLineA
WriteConsoleW
GetModuleHandleA
Sleep
WriteConsoleW
VirtualProtect
GetProcessHeap
lstrlenW
GetFileAttributesA
SetEvent
GetPrivateProfileSectionW
DeleteFileA
VirtualQuery
AddAtomW
GetDriveTypeW
HeapDestroy
WriteConsoleW
CancelIo
lstrcpyA
mmcndmgr
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllRegisterServer
uxtheme
SetWindowTheme
GetThemeColor
GetThemeTextExtent
CloseThemeData
OpenThemeData
GetWindowTheme
IsThemeActive
GetThemeBool
GetThemeSysSize
GetThemeTextMetrics
DrawThemeEdge
CloseThemeData
DrawThemeBackground
Sections
.text Size: 1024B - Virtual size: 819B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.export Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE