Static task
static1
Behavioral task
behavioral1
Sample
6b14fc0e52b2f1612cd1162a37beaaebd1aa91b9663dbb213a445d66d65bea3b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b14fc0e52b2f1612cd1162a37beaaebd1aa91b9663dbb213a445d66d65bea3b.exe
Resource
win10v2004-20220901-en
General
-
Target
6b14fc0e52b2f1612cd1162a37beaaebd1aa91b9663dbb213a445d66d65bea3b
-
Size
48KB
-
MD5
0c5408a21ec49d962c0d67b4b2330601
-
SHA1
724fe1d2f13a2409cb6bc1e110e32ae1b717d1f4
-
SHA256
6b14fc0e52b2f1612cd1162a37beaaebd1aa91b9663dbb213a445d66d65bea3b
-
SHA512
44f400aa720cf6dd5f22af0c0ecc6aa0d1f1033d005740e7cbc5c8a066b64e3a4638274393ce6a7b3a002423b891d839820f81daa8b90a7e8e0e06b27117cd89
-
SSDEEP
768:WREhr0ZAPHG0ZhJ461FxXhD9FvMH28ymSr30IVP9x:EWoatd1jhnMH28ymiVP9x
Malware Config
Signatures
Files
-
6b14fc0e52b2f1612cd1162a37beaaebd1aa91b9663dbb213a445d66d65bea3b.exe windows x86
71739f0959953507f2e40589eab34bfb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_acmdln
__set_app_type
_except_handler3
_controlfp
exit
_XcptFilter
_exit
strncmp
atoi
strncpy
_access
??2@YAPAXI@Z
malloc
realloc
??3@YAXPAX@Z
__p__fmode
free
_stricmp
kernel32
GetModuleHandleA
LocalAlloc
LocalFree
Sleep
lstrlenA
FreeLibrary
VirtualFree
GetProcessHeap
HeapFree
LoadLibraryA
VirtualAlloc
GetProcAddress
GetStartupInfoA
user32
GetInputState
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 954B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ