Static task
static1
Behavioral task
behavioral1
Sample
6399728e8d2814eee123d6f1597f5662506f75aea836dd3362bf28eaf9e5424b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6399728e8d2814eee123d6f1597f5662506f75aea836dd3362bf28eaf9e5424b.exe
Resource
win10v2004-20220812-en
General
-
Target
6399728e8d2814eee123d6f1597f5662506f75aea836dd3362bf28eaf9e5424b
-
Size
292KB
-
MD5
48e710509740393c3a40fb73c51e9e10
-
SHA1
893c0f409ba4fd5b14bd4bef2dfb83991dece339
-
SHA256
6399728e8d2814eee123d6f1597f5662506f75aea836dd3362bf28eaf9e5424b
-
SHA512
c146a29ade1a5ebe77854ef9bb338291782cd594e072d26d8657acaedac2a743c3b3f24ac5990bd5b163ea01b3d06cb73a15fde98ca0e87b4a0baf2c2e7ebc65
-
SSDEEP
6144:tUA3meNSg5yt88HIPtcSZlbqH53ewrutL5BXVXiyn:6Cmy3ZABJStLbl
Malware Config
Signatures
Files
-
6399728e8d2814eee123d6f1597f5662506f75aea836dd3362bf28eaf9e5424b.exe windows x86
7eeb48ed3e1ade07a14cd3023e4cbaee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
DeleteFileA
GetModuleHandleA
HeapDestroy
GetFileAttributesW
GetStdHandle
lstrlenW
VirtualProtect
CreatePipe
GetProcessHeap
WriteConsoleW
SetEvent
GetCurrentDirectoryA
GetCommandLineA
GetPriorityClass
ResumeThread
WriteConsoleW
CopyFileA
lstrcpyA
WriteConsoleW
DisconnectNamedPipe
mmcndmgr
DllRegisterServer
DllUnregisterServer
DllUnregisterServer
DllRegisterServer
shell32
DragQueryFileA
DragFinish
SHGetSettings
DragAcceptFiles
DuplicateIcon
SHFree
SHGetMalloc
ShellAboutA
SHGetDiskFreeSpaceA
DllUnregisterServer
ShellMessageBoxA
ExtractIconA
StrChrA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 285KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 195B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE