Static task
static1
Behavioral task
behavioral1
Sample
b6b78ecc372dbafe69bbda0f289d278b1e6678a53afdee88c0e4ceaf801bd595.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6b78ecc372dbafe69bbda0f289d278b1e6678a53afdee88c0e4ceaf801bd595.exe
Resource
win10v2004-20220812-en
General
-
Target
b6b78ecc372dbafe69bbda0f289d278b1e6678a53afdee88c0e4ceaf801bd595
-
Size
109KB
-
MD5
566caaeca1b3c4aa080467f1e7d51686
-
SHA1
3c2cb6874a8a1d96e41565ead5c146188108c11c
-
SHA256
b6b78ecc372dbafe69bbda0f289d278b1e6678a53afdee88c0e4ceaf801bd595
-
SHA512
d85c944b74b68d8e43343b39e441a926a1d366ef931773448de27ae61ba7e7cf46643b09d7f0dc3663e1ce90b17968303e56ab572ec8640d56ca63abd9579126
-
SSDEEP
3072:+CoS0TLDVU9OAgEaYhHMcx0+StIkY4dBsXGjA:+CoZHxyhbhHMcxjSSRLP
Malware Config
Signatures
Files
-
b6b78ecc372dbafe69bbda0f289d278b1e6678a53afdee88c0e4ceaf801bd595.exe windows x86
3e88f0e8ccd8d511ea7eed8b6ec9e643
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
uniansi
FormatMessageW
GetModuleFileNameW
lstrcpyW
LoadStringW
kernel32
GetUserDefaultLangID
GetModuleHandleA
GetStartupInfoA
MultiByteToWideChar
lstrlenA
lstrcmpA
user32
MessageBoxW
ole32
CoInitialize
CLSIDFromProgID
CoCreateInstance
CoUninitialize
oleaut32
SysAllocStringLen
SysAllocString
SysFreeString
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
exit
_exit
_acmdln
_XcptFilter
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE