Static task
static1
Behavioral task
behavioral1
Sample
69b9a1e8610ae4c4aa0d56aca89ad9d0c70085e4ea6a59d71ddae81bbe0f24a0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
69b9a1e8610ae4c4aa0d56aca89ad9d0c70085e4ea6a59d71ddae81bbe0f24a0.exe
Resource
win10v2004-20220812-en
General
-
Target
69b9a1e8610ae4c4aa0d56aca89ad9d0c70085e4ea6a59d71ddae81bbe0f24a0
-
Size
884KB
-
MD5
6178a08d3deb7ce98b29a401c79a66a0
-
SHA1
ccb6251ea16983bf914f91f26c4e6a2f25fad9b2
-
SHA256
69b9a1e8610ae4c4aa0d56aca89ad9d0c70085e4ea6a59d71ddae81bbe0f24a0
-
SHA512
2648f85f40bd95becaecfc4d1fff7a65a158f26159b51813d75bfee49fcd001e034f62f546ff2f9977584d9b2da015510b7457c8e729ba4d08b6153f1e772dd1
-
SSDEEP
24576:16zSGM27dHKwt+NZvIXPeQSvBVrJbpgJizUDli:UWk7dK8WQMBVrJ9gsz8
Malware Config
Signatures
Files
-
69b9a1e8610ae4c4aa0d56aca89ad9d0c70085e4ea6a59d71ddae81bbe0f24a0.exe windows x86
781598a26d30617f332ccfb10d548a3b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetCalendarInfoA
OpenEventW
GetGeoInfoW
lstrcatA
GetGeoInfoW
Heap32Next
ResetEvent
GetModuleHandleA
GetGeoInfoW
GetFileAttributesW
GetModuleHandleW
GetGeoInfoW
VirtualProtectEx
GetCurrentProcessId
CreateMutexA
wmvcore
WMIsContentProtected
WMCreateWriter
WMCreateReader
WMCreateEditor
Sections
.text Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.DATA Size: 869KB - Virtual size: 2.2MB
IMAGE_SCN_MEM_READ