Static task
static1
Behavioral task
behavioral1
Sample
6d6a8a850ff466df18736aa20b18b0bcf6a1e801b0130e6825c393cab11fbab8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d6a8a850ff466df18736aa20b18b0bcf6a1e801b0130e6825c393cab11fbab8.exe
Resource
win10v2004-20220812-en
General
-
Target
6d6a8a850ff466df18736aa20b18b0bcf6a1e801b0130e6825c393cab11fbab8
-
Size
303KB
-
MD5
5250fe21346d12cb93c6d164cea385f0
-
SHA1
cbd9b157d84a3edc2b868c02e97eef5f0d4a9cec
-
SHA256
6d6a8a850ff466df18736aa20b18b0bcf6a1e801b0130e6825c393cab11fbab8
-
SHA512
67fa12a33f38404ec73f56cedd5b0991036cd4295d07b682e0ce0b93e5a7109e2d763ed0e38b44ea15391d212c464a6a5d406dd88ff157c32511e0069b61cc17
-
SSDEEP
6144:HwOsI09tjCVBxTYq3yPPgdrNzEyNEaGNv3Bw833RXHMw/1XLUbOO:Ba1mxTYkaqzCaGNv3BL3BXsw/FLJ
Malware Config
Signatures
Files
-
6d6a8a850ff466df18736aa20b18b0bcf6a1e801b0130e6825c393cab11fbab8.exe windows x86
35e415baba38b504e966d1ed4e0c6fef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CreateFileA
WaitForMultipleObjects
CreatePipe
GetTickCount
ExitProcess
SetLastError
GetEnvironmentVariableW
HeapSize
DeleteFileA
RemoveDirectoryA
GetStdHandle
FindClose
OpenProcess
WaitForSingleObject
Sleep
GetCurrentDirectoryA
ResetEvent
GetConsoleTitleA
GetStartupInfoW
HeapCreate
CreateMutexA
GetFileAttributesA
CloseHandle
GetCommandLineW
user32
GetClassInfoA
GetSysColor
FindWindowW
CallWindowProcW
GetDC
GetDC
PeekMessageA
DispatchMessageW
FillRect
GetDC
DispatchMessageW
MessageBoxA
GetWindowLongA
ureg
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ