Static task
static1
Behavioral task
behavioral1
Sample
6982cea19d92e34e021d49b147b65472a83da6e2165ad7169bc00961439c55e0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6982cea19d92e34e021d49b147b65472a83da6e2165ad7169bc00961439c55e0.exe
Resource
win10v2004-20220901-en
General
-
Target
6982cea19d92e34e021d49b147b65472a83da6e2165ad7169bc00961439c55e0
-
Size
182KB
-
MD5
44baf7328e9cc57df99104dde2aa6450
-
SHA1
a69aa4e6211900fcb2c08de469501943e1373e6f
-
SHA256
6982cea19d92e34e021d49b147b65472a83da6e2165ad7169bc00961439c55e0
-
SHA512
5fac265c401724da38b8141d10e20e765c2f260acc84267c4e1e94c55a3dec2e5d5210532b1656e1329a12e2cbac91e3e157cae947adbc05d3c88080d491b005
-
SSDEEP
3072:ZtYJlUWowDINYKMncNnkGHRZtzqOez8m1qAoKxr3QEt0lNv8oONglXWGnmYOecMM:kMWow5ncJ7HNz/2kAoSrAEaNNOodA866
Malware Config
Signatures
Files
-
6982cea19d92e34e021d49b147b65472a83da6e2165ad7169bc00961439c55e0.exe windows x86
b0c664deba4838bb1f26c7206e947521
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32NextW
CreateFileMappingA
NlsConvertIntegerToString
GlobalFlags
SystemTimeToFileTime
GetDiskFreeSpaceW
lstrcpyW
GetFullPathNameW
ConnectNamedPipe
CreateDirectoryA
GlobalFindAtomW
CreateNamedPipeW
VirtualFree
WaitNamedPipeA
GetCurrentConsoleFont
GetCommandLineA
ExitProcess
GetStartupInfoA
user32
MB_GetString
MessageBoxW
DlgDirListA
InitializeLpkHooks
DlgDirListA
DdeQueryStringW
GetMenuBarInfo
IsCharAlphaNumericW
MonitorFromPoint
DialogBoxIndirectParamA
CreateMDIWindowA
ReplyMessage
gdi32
GetCharWidthFloatA
GetICMProfileW
GdiCreateLocalEnhMetaFile
GetGlyphIndicesA
PolyPatBlt
CloseFigure
SetMapperFlags
GetNearestColor
UpdateICMRegKeyA
CreateBrushIndirect
STROBJ_bEnumPositionsOnly
CreatePatternBrush
GdiConvertPalette
EngAssociateSurface
GdiTransparentBlt
Sections
CODE Size: 5KB - Virtual size: 810KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE