Static task
static1
Behavioral task
behavioral1
Sample
0a6c63b3ae47e9c9e365c8b617e94cd5131e17261e6df7796a74bfb59a43c66d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0a6c63b3ae47e9c9e365c8b617e94cd5131e17261e6df7796a74bfb59a43c66d.exe
Resource
win10v2004-20220812-en
General
-
Target
0a6c63b3ae47e9c9e365c8b617e94cd5131e17261e6df7796a74bfb59a43c66d
-
Size
137KB
-
MD5
6722b0a7b70d5c8a9d2432e0139f5c90
-
SHA1
6af50d0ee99ffa4e07e83ec241b396eb3c0a7661
-
SHA256
0a6c63b3ae47e9c9e365c8b617e94cd5131e17261e6df7796a74bfb59a43c66d
-
SHA512
0665fe06d67e862faef73412ce48b6dd2e93d6ac3d80c09f13b866bec532b009191d1f0b4ffb9db132ea11b62d68c85202e9a9023aad3204630ba2634b6c27bf
-
SSDEEP
3072:DMHxdrw1oOhLEdjm71r7FNZhAAAUrKLZn22hMr56gSEKTGMe47:DMHrrYouLEdgbNZhkUMZn2Nr56tEKTGM
Malware Config
Signatures
Files
-
0a6c63b3ae47e9c9e365c8b617e94cd5131e17261e6df7796a74bfb59a43c66d.exe windows x86
c766b0377c611280113cbd0b84f23ba9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ClearCommBreak
ExitProcess
ClearCommBreak
CreateProcessW
EnumResourceNamesW
ExitProcess
QueryPerformanceCounter
GetStartupInfoA
GetExitCodeProcess
rpcrt4
RpcStringBindingComposeA
NdrClientCall
RpcBindingFromStringBindingA
RpcBindingSetAuthInfoA
RpcStringFreeA
user32
GetMessageA
CharUpperA
KillTimer
PostThreadMessageA
SetTimer
PeekMessageA
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rscr Size: 512B - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ