?rdBYnzmjnngsqc@@YGPAXHPAE@Z
Static task
static1
Behavioral task
behavioral1
Sample
6ec4b2666d89a305d4e7a5556bada5082a895e3d488a0e98a4201758343f073e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6ec4b2666d89a305d4e7a5556bada5082a895e3d488a0e98a4201758343f073e.exe
Resource
win10v2004-20220812-en
General
-
Target
6ec4b2666d89a305d4e7a5556bada5082a895e3d488a0e98a4201758343f073e
-
Size
190KB
-
MD5
62174537d59307d3f8696c0c800aee49
-
SHA1
5bd54a2e0cba109f9751ebe708c9a96ba1eff9a0
-
SHA256
6ec4b2666d89a305d4e7a5556bada5082a895e3d488a0e98a4201758343f073e
-
SHA512
3f008d59761756bf7b41357520234161b18ad281fd9ed704d00d01b5f3cc3ffdc810cb21f5b6387abbe0532968f861173964fa1f19ff7a5e59b9f4975f023635
-
SSDEEP
3072:3jtpPihAY/emJyEsJ5RAJpgPXU2kw5zkxqbsrVmvESJmGDXznE/6nAj7O0:3zihAQ9EJTIpKRAqwrVm8MDzo5b
Malware Config
Signatures
Files
-
6ec4b2666d89a305d4e7a5556bada5082a895e3d488a0e98a4201758343f073e.exe windows x86
53b8b127230f5980134eee6d5515042e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
HeapCreate
GetModuleHandleW
GetProcAddress
IsBadHugeWritePtr
SetCommState
GetStartupInfoW
GetSystemDirectoryA
IsBadStringPtrW
MulDiv
DeleteFileA
Sleep
GetShortPathNameW
user32
IsWindowVisible
RegisterClassExA
HideCaret
GetUserObjectInformationA
GetDoubleClickTime
IntersectRect
GetKeyboardType
GetSysColor
DrawIcon
SetScrollInfo
OemToCharBuffA
SendMessageW
IsCharAlphaW
gdi32
PathToRegion
CreateFontA
GetTextExtentExPointW
CreateICW
CreatePenIndirect
GetROP2
Polyline
DPtoLP
SetPaletteEntries
shlwapi
PathFindNextComponentW
comdlg32
GetOpenFileNameA
GetSaveFileNameW
GetOpenFileNameW
FindTextW
Exports
Exports
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 51B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ