Static task
static1
Behavioral task
behavioral1
Sample
6d47ac85c03f77f8ffe8d0f6d9e40e9282be803461172ab2d367d0fc3569b81f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d47ac85c03f77f8ffe8d0f6d9e40e9282be803461172ab2d367d0fc3569b81f.exe
Resource
win10v2004-20220812-en
General
-
Target
6d47ac85c03f77f8ffe8d0f6d9e40e9282be803461172ab2d367d0fc3569b81f
-
Size
218KB
-
MD5
757e8142a1424c6af36ace121a23fce8
-
SHA1
2fb0ba8debad4e627fad4ca0c320a8539b77ba2f
-
SHA256
6d47ac85c03f77f8ffe8d0f6d9e40e9282be803461172ab2d367d0fc3569b81f
-
SHA512
507719cc69a9cddf710130c5500cd250e78d792b6dc53e5922711f267040bb21255098f53a6898f5cd5209c0c95da16323f78f79236e22c7dda42e487da7f663
-
SSDEEP
6144:XHDI3UJ1rCshMTIvGty174K66mno4U6S:XjI3cNCs6Uvfn66mno4UP
Malware Config
Signatures
Files
-
6d47ac85c03f77f8ffe8d0f6d9e40e9282be803461172ab2d367d0fc3569b81f.exe windows x86
1d286c77bbe013eee8d706b5818c52e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysReAllocStringLen
SafeArrayCreate
VariantChangeType
SafeArrayPtrOfIndex
SysFreeString
OleLoadPicture
RegisterTypeLib
SafeArrayUnaccessData
SafeArrayGetElement
comctl32
ImageList_Write
ImageList_DragShowNolock
ImageList_Add
shell32
SHGetFolderPathA
DragQueryFileA
version
VerInstallFileA
VerQueryValueA
user32
DefWindowProcA
WaitMessage
gdi32
GetObjectA
GetDCOrgEx
SetBkMode
GetPixel
GetClipBox
GetDIBits
shlwapi
PathIsContentTypeA
SHQueryInfoKeyA
SHStrDupA
SHEnumValueA
advapi32
RegOpenKeyA
kernel32
EnterCriticalSection
GetCommandLineA
IsBadReadPtr
GetCommandLineW
GetProcAddress
GetTickCount
SetLastError
ExitThread
LoadLibraryA
GetACP
ExitProcess
VirtualAllocEx
FindFirstFileA
GetVersionExA
GetModuleHandleA
GlobalAlloc
MoveFileA
VirtualAlloc
GetThreadLocale
lstrcmpiA
GetOEMCP
LocalAlloc
Sections
.text Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC8 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC0 Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC6 Size: 1024B - Virtual size: 998B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ