Static task
static1
Behavioral task
behavioral1
Sample
6a5cb888a8c7c72c3b17109b01d8414bd78a80b6e225e9cba7db73c7c498e737.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6a5cb888a8c7c72c3b17109b01d8414bd78a80b6e225e9cba7db73c7c498e737.exe
Resource
win10v2004-20220901-en
General
-
Target
6a5cb888a8c7c72c3b17109b01d8414bd78a80b6e225e9cba7db73c7c498e737
-
Size
304KB
-
MD5
68c0b92e441be12dccca271b664bc47c
-
SHA1
b27ffb5598a86c986ff70d82c81eba71530664e9
-
SHA256
6a5cb888a8c7c72c3b17109b01d8414bd78a80b6e225e9cba7db73c7c498e737
-
SHA512
0a320a84c549ca939f15706b20e4bb9c70583f1261265c3d798fbfaa78eb5b1a82e264a68b9353b3007d0b1505431af16aa3292c5a3d24af034d8d6f7f2a773d
-
SSDEEP
6144:PvQPdklu59OYsyANlRho3F2ljuKJRl9KtSUFYTKoilxcSM:niu69OeANl/laKJRl9KtSUFGKoMO7
Malware Config
Signatures
Files
-
6a5cb888a8c7c72c3b17109b01d8414bd78a80b6e225e9cba7db73c7c498e737.exe windows x86
01f7beaa911504b90c365520b818a624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
GetModuleHandleA
VirtualQuery
SetEvent
GetVersionExA
lstrcmpiA
ExitProcess
MoveFileExA
lstrcpyA
VirtualAllocEx
GetDiskFreeSpaceA
GetProcAddress
LoadLibraryA
GetFileAttributesA
GetCurrentThread
MulDiv
GetTickCount
user32
IsWindowEnabled
GetMenuItemCount
EnableScrollBar
SetWindowLongA
GetMenu
WindowFromPoint
UpdateWindow
DrawIcon
SetCursor
DrawTextA
GetDCEx
GetWindowLongA
GetIconInfo
GetActiveWindow
IsRectEmpty
GetScrollRange
IsWindowVisible
GetFocus
version
VerFindFileA
VerInstallFileA
ole32
CoRevokeClassObject
WriteClassStm
CoGetObjectContext
CreateBindCtx
CoUninitialize
CLSIDFromString
StringFromIID
CreateOleAdviseHolder
CreateStreamOnHGlobal
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 244KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 421B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ