Static task
static1
Behavioral task
behavioral1
Sample
06c8da3f2f09c4f92ea9c71a7ec0fe7e1660a201eaf080fc825ae70bc620b9f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06c8da3f2f09c4f92ea9c71a7ec0fe7e1660a201eaf080fc825ae70bc620b9f2.exe
Resource
win10v2004-20220812-en
General
-
Target
06c8da3f2f09c4f92ea9c71a7ec0fe7e1660a201eaf080fc825ae70bc620b9f2
-
Size
88KB
-
MD5
36aaac0568ea138058d6ffa8ed5b3140
-
SHA1
168191d6b094b808200b4b628f815d65f559d1ce
-
SHA256
06c8da3f2f09c4f92ea9c71a7ec0fe7e1660a201eaf080fc825ae70bc620b9f2
-
SHA512
5151479150858041b15d282fc0374ca99842a0fda2604d25bad31e4ca2eb8b6252d98b70012d84feb068979c41298aa8853eb4cbb1eb08bb6613fd845ae31707
-
SSDEEP
1536:IL91Da0Dnp+ckFLPdswE6oGlesJ5/3AjwOPHQk1ebcNpNDoc:ILDQckFTdgPGl/j3y7sbcNpNDl
Malware Config
Signatures
Files
-
06c8da3f2f09c4f92ea9c71a7ec0fe7e1660a201eaf080fc825ae70bc620b9f2.exe windows x86
96c1e71db065ee1e6d1ce9e2a956338b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
OpenEventA
Sleep
LoadLibraryA
GetLastError
DeleteFileA
RemoveDirectoryA
VirtualFree
ResumeThread
VirtualProtect
GetLocaleInfoA
RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetSystemInfo
TerminateProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
VirtualQuery
user32
LoadCursorA
DestroyWindow
LoadBitmapA
LoadIconA
ShowWindow
ole32
CoCreateInstance
winmm
mmioRenameA
dnsapi
DnsAcquireContextHandle_A
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ