Static task
static1
Behavioral task
behavioral1
Sample
c6f7d5994c0a429de711c8444be8a9bc7f4c465494ce5b7aa6a8608b81bd5627.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6f7d5994c0a429de711c8444be8a9bc7f4c465494ce5b7aa6a8608b81bd5627.exe
Resource
win10v2004-20220812-en
General
-
Target
c6f7d5994c0a429de711c8444be8a9bc7f4c465494ce5b7aa6a8608b81bd5627
-
Size
592KB
-
MD5
158eed33aa4a8768c7e8d392ddf57a80
-
SHA1
f5e06bd4275a93cfe44be30e1ad2f85fc7c43a84
-
SHA256
c6f7d5994c0a429de711c8444be8a9bc7f4c465494ce5b7aa6a8608b81bd5627
-
SHA512
015e0c307a8588898f499e289120a7774a6710049204b152edce4895dbe68ddb62170a65eecfcb8cbebaa413caa4c931a642a76b2dde37d4e2fc0609113be6d9
-
SSDEEP
12288:nfLj9+uraPfN32WlHpaHOnM9TffIndMwy0tVSc22H/9SDi3Hb:nNaHN32WliOnATfYdq0t0cBH/97b
Malware Config
Signatures
Files
-
c6f7d5994c0a429de711c8444be8a9bc7f4c465494ce5b7aa6a8608b81bd5627.exe windows x86
26599efe037df9a010b2b999a1562670
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDC
advapi32
RegCloseKey
shell32
ShellExecuteA
iphlpapi
GetAdaptersInfo
ws2_32
gethostbyname
wtsapi32
WTSRegisterSessionNotification
oleacc
LresultFromObject
gdi32
SaveDC
winspool.drv
OpenPrinterW
oleaut32
VariantClear
Sections
.MPRESS1 Size: 539KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE