Static task
static1
Behavioral task
behavioral1
Sample
6ce5615a76f053bdd63aebb985c878fca76b215fb1fe7e1a014c174095071832.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6ce5615a76f053bdd63aebb985c878fca76b215fb1fe7e1a014c174095071832.exe
Resource
win10v2004-20220812-en
General
-
Target
6ce5615a76f053bdd63aebb985c878fca76b215fb1fe7e1a014c174095071832
-
Size
182KB
-
MD5
3110af0ab5941d5e0ca4ae5c47e9c940
-
SHA1
684337171ea862ce4ded2c02f9e134fd01173c7f
-
SHA256
6ce5615a76f053bdd63aebb985c878fca76b215fb1fe7e1a014c174095071832
-
SHA512
cbea9d87895946edb92da2888b94c2346e632fa01e963cac109da198d31a2693a8cb3d5f7d64ce2a6f910a7c279dcbb605109ec85101c629f2d02293e5d5b913
-
SSDEEP
3072:zYr+dq5HQKesonlYrfOwUG+6xd4v944JPW2M6P9/vf5FFSq5lqSSCuUX2Hz:zTIH1onurPhxd4+4Ju+P9/vPMal3luUa
Malware Config
Signatures
Files
-
6ce5615a76f053bdd63aebb985c878fca76b215fb1fe7e1a014c174095071832.exe windows x86
f41e95852c82f7fa0063e375fca24a30
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnregisterWait
GetModuleHandleA
GetDiskFreeSpaceExA
GetLocaleInfoA
GetStartupInfoA
CallNamedPipeA
GetCalendarInfoW
msvcrt
__setusermatherr
sqrt
_wfindnexti64
_except_handler3
__set_app_type
__getmainargs
puts
_ismbcpunct
signal
_XcptFilter
_exit
_controlfp
wcscoll
_mbscoll
exit
__p__fmode
_adjust_fdiv
_pclose
getwchar
__p__commode
_acmdln
_initterm
user32
GetForegroundWindow
DialogBoxIndirectParamA
SystemParametersInfoA
CopyImage
GetKeyNameTextW
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ