Static task
static1
Behavioral task
behavioral1
Sample
6c499c68dbcd359bd68772ecb767907feb88abfbd2454e16c16d194e60c8ca56.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6c499c68dbcd359bd68772ecb767907feb88abfbd2454e16c16d194e60c8ca56.exe
Resource
win10v2004-20220812-en
General
-
Target
6c499c68dbcd359bd68772ecb767907feb88abfbd2454e16c16d194e60c8ca56
-
Size
1.3MB
-
MD5
6bb0d481aca3e04e44cbfda990a72f8b
-
SHA1
6ae20866b141471bfe4d47e8925a258401ecc657
-
SHA256
6c499c68dbcd359bd68772ecb767907feb88abfbd2454e16c16d194e60c8ca56
-
SHA512
d896e58cd75eda43d2a8f421d503b6185cee302482f609179a0e0834b84935e631bcb263371d0ed4216110347c129f9ae56cab06e94f90e91638875bfc301e07
-
SSDEEP
24576:EangJ2ufzYs4om0ElkiQ3fGVUinW4oMMMMMMMMMMMMMMMMMMJFb1AbnSIiEh8/6:Ls2AYsiLltVUinpoMMMMMMMMMMMMMMMb
Malware Config
Signatures
Files
-
6c499c68dbcd359bd68772ecb767907feb88abfbd2454e16c16d194e60c8ca56.exe windows x86
7549e25888c91176f99e3aaab520b42e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
VirtualAllocEx
HeapSize
IsSystemResumeAutomatic
lstrcpyA
RtlMoveMemory
SetDllDirectoryA
ReleaseSemaphore
GetFileSize
RemoveDirectoryA
CreateNamedPipeA
SetConsoleTextAttribute
LockFileEx
GetDllDirectoryA
GetSystemWindowsDirectoryA
GlobalFix
lstrcmpA
GetEnvironmentVariableA
OpenJobObjectA
CreateProcessA
GetBinaryTypeA
SetFilePointer
PulseEvent
WriteConsoleOutputCharacterA
GetDiskFreeSpaceA
GetCurrentConsoleFont
GetNumberOfConsoleFonts
LoadLibraryExA
FindVolumeMountPointClose
GetProfileStringA
WriteConsoleOutputCharacterA
lstrlenA
GetLastError
WriteFileEx
WritePrivateProfileStringA
ExpandEnvironmentStringsA
GetCurrentDirectoryA
EnumResourceNamesA
GetConsoleAliasExesW
HeapSize
ReleaseMutex
OpenEventA
ClearCommBreak
ConnectNamedPipe
dpmodemx
SPInit
advapi32
CredFree
user32
CharUpperBuffA
OemToCharBuffA
IsCharUpperA
SetMenuContextHelpId
IsDialogMessageA
CreateDesktopA
GetListBoxInfo
GetMenuCheckMarkDimensions
GetKeyboardLayout
GetClassWord
IsCharUpperA
DispatchMessageA
GetUserObjectSecurity
SwitchToThisWindow
GetWindow
ToAscii
GetWindowRgnBox
UpdateLayeredWindow
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 636KB - Virtual size: 989KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 331KB - Virtual size: 330KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ