Static task
static1
Behavioral task
behavioral1
Sample
6aeb4e246c4b9d61fc75107a88c648074f5caefec71b79859f14b0f294cdef59.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6aeb4e246c4b9d61fc75107a88c648074f5caefec71b79859f14b0f294cdef59.exe
Resource
win10v2004-20220901-en
General
-
Target
6aeb4e246c4b9d61fc75107a88c648074f5caefec71b79859f14b0f294cdef59
-
Size
32KB
-
MD5
488a1ec56ab77f086467f35db58d5400
-
SHA1
3b9a3cbcd4f73be77e2ee0a917d147ff2fb4b77a
-
SHA256
6aeb4e246c4b9d61fc75107a88c648074f5caefec71b79859f14b0f294cdef59
-
SHA512
c1f40190284d3b7e6b80c5b98280da4b764f1f3a28b9c08c9f0aa0e3ca653e143ac2185e1f124eaee9eaec67f836f520684d1d17215cd7adb2b5863b55f4f53c
-
SSDEEP
768:47jMEXNPDzbRT5qVdNEtzvWIBwnaFqN/2OxMXGJ4kxHtNWrKSRr0D39TZ:4ndXNPDzbRT5qVXEtzvWIBWaQ92OO2Jp
Malware Config
Signatures
Files
-
6aeb4e246c4b9d61fc75107a88c648074f5caefec71b79859f14b0f294cdef59.exe windows x86
425c043813b0ea9c6d4093878c9e9164
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__getmainargs
_except_handler3
_controlfp
??2@YAPAXI@Z
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
??3@YAXPAX@Z
__set_app_type
kernel32
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
GetCurrentThreadId
user32
DispatchMessageW
GetMessageW
PostThreadMessageW
ole32
CoUninitialize
CoRevokeClassObject
CoRegisterClassObject
CoInitializeSecurity
CoInitializeEx
CoReleaseServerProcess
CoAddRefServerProcess
CoCreateInstanceEx
CoTaskMemAlloc
CoTaskMemFree
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE