Static task
static1
Behavioral task
behavioral1
Sample
6e212157b5dfb4e68f59120567e864f4612039f60ce72841cf830c6c5ea3f454.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e212157b5dfb4e68f59120567e864f4612039f60ce72841cf830c6c5ea3f454.exe
Resource
win10v2004-20220812-en
General
-
Target
6e212157b5dfb4e68f59120567e864f4612039f60ce72841cf830c6c5ea3f454
-
Size
268KB
-
MD5
829a386d65bd0a4dc8b48a7ad5a6fdb2
-
SHA1
4b7c7e773cc6c4e95f86ae504727c43dcdca2967
-
SHA256
6e212157b5dfb4e68f59120567e864f4612039f60ce72841cf830c6c5ea3f454
-
SHA512
521bcf45dab0a7cde3c106f1297d0bb9a2e93ea367f304236579ef66b8945540d5467a4ddfcebc8c4dd8ffdfba9cec97725ff1150eae4e715ae7ecc65a7ef643
-
SSDEEP
6144:RGyJKeYysrZNCaBVIvIbjtPNcPxKQvVFS9JV7:wymiaBevA/4KQvVQ9L7
Malware Config
Signatures
Files
-
6e212157b5dfb4e68f59120567e864f4612039f60ce72841cf830c6c5ea3f454.exe windows x86
3f5d905cc8ad8aa17f89c9fe8c179f97
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
LoadLibraryW
FormatMessageA
GetProcessId
VirtualProtect
CreateDirectoryA
GetModuleHandleA
GetDriveTypeA
lstrcpynA
GetPrivateProfileIntA
CloseHandle
Sleep
user32
GetMessageW
FindWindowA
GetClassLongA
CharToOemA
DialogBoxParamA
PeekMessageW
GetPropW
LoadBitmapA
IsZoomed
LoadIconA
PostMessageW
DrawStateA
CreateDesktopW
LoadCursorA
LoadMenuW
GetDlgItemTextW
wsprintfA
rsaenh
CPDeriveKey
CPDecrypt
CPGenKey
CPEncrypt
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ