Static task
static1
Behavioral task
behavioral1
Sample
6e9f28ac3b89e0ebc31a1f17107b53d6fc9107c4a7066a8a31b235e897e5d7c6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6e9f28ac3b89e0ebc31a1f17107b53d6fc9107c4a7066a8a31b235e897e5d7c6.exe
Resource
win10v2004-20220812-en
General
-
Target
6e9f28ac3b89e0ebc31a1f17107b53d6fc9107c4a7066a8a31b235e897e5d7c6
-
Size
993KB
-
MD5
810d86565214987f0e58459cb73c6f40
-
SHA1
3f29963712c1e0511d2486cd6fee7e776ee077fe
-
SHA256
6e9f28ac3b89e0ebc31a1f17107b53d6fc9107c4a7066a8a31b235e897e5d7c6
-
SHA512
748d22eeeb39b5974254bd25031fa86db2054de2164801cedcbff59b8d9c0c08f98b722aa13c3962fba6e9036859231704b88ac47bee5a6edb55ee644ad09db5
-
SSDEEP
24576:A+hQnTVk917dWwH/piiT2k0f7SojDUzBa:ZwapWAiiTvgJDUzBa
Malware Config
Signatures
Files
-
6e9f28ac3b89e0ebc31a1f17107b53d6fc9107c4a7066a8a31b235e897e5d7c6.exe windows x86
6fd4bffd8d307abcbbc02f7141d50156
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalUnlock
GetCommandLineA
ntdll
NtOpenKeyedEvent
advapi32
QueryAllTracesW
BuildSecurityDescriptorW
user32
GetMessagePos
GetForegroundWindow
Sections
.text Size: 986KB - Virtual size: 988KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE