Static task
static1
Behavioral task
behavioral1
Sample
c6e80c4bf6272e69c505bcd211cd1f423bf2524750a38316cb7f74b6f221e90f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6e80c4bf6272e69c505bcd211cd1f423bf2524750a38316cb7f74b6f221e90f.exe
Resource
win10v2004-20220812-en
General
-
Target
c6e80c4bf6272e69c505bcd211cd1f423bf2524750a38316cb7f74b6f221e90f
-
Size
44KB
-
MD5
7c798d34549a88afc7cecc42ff27a0c0
-
SHA1
0e401db472989ce2a0ee54356b8ff463d5e76e0a
-
SHA256
c6e80c4bf6272e69c505bcd211cd1f423bf2524750a38316cb7f74b6f221e90f
-
SHA512
cabbd718ddf260948fe3d278e5cb8aa59cabed0644444711e0560a5b2713cdfba0d3c7df9f1fcea383b47b1073cbf761ee19f1ded21806e58c0319570ec4367e
-
SSDEEP
384:05Z+HTWZyXBe6ZETx+SsPB/mlmm7r1tgONul9nT94kuSy/XECofg9Z4i:rWZQBrZex+dB8gNlpT+kuSyfhofg9Zp
Malware Config
Signatures
Files
-
c6e80c4bf6272e69c505bcd211cd1f423bf2524750a38316cb7f74b6f221e90f.exe windows x86
bb7c804d4e54bc09ad2f02091c67a928
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
WaitForSingleObject
GetWindowsDirectoryA
CopyFileA
CreateProcessA
HeapCreate
LCMapStringA
MultiByteToWideChar
SetEndOfFile
DeleteFileA
CreateFileA
ReadFile
CloseHandle
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
GetSystemTime
VirtualFree
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
GetStringTypeA
GetEnvironmentStringsW
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetLastError
SetFilePointer
user32
GetWindowTextA
GetDlgItem
SetCursor
LoadCursorA
IsDlgButtonChecked
EnableWindow
MessageBoxA
GetFocus
DialogBoxParamA
SendMessageA
CheckRadioButton
EndDialog
SetFocus
SetWindowTextA
advapi32
RegFlushKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyA
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ