Static task
static1
Behavioral task
behavioral1
Sample
6c290bfa33bb06001572235545e0ca860a83e81325ea8110683ee7571c0dc88c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6c290bfa33bb06001572235545e0ca860a83e81325ea8110683ee7571c0dc88c.exe
Resource
win10v2004-20220812-en
General
-
Target
6c290bfa33bb06001572235545e0ca860a83e81325ea8110683ee7571c0dc88c
-
Size
93KB
-
MD5
0f1b513fc19fee509885a67061e6ba30
-
SHA1
e87d6b90d4dea7d1589d09fa080e30d1eb57f5c4
-
SHA256
6c290bfa33bb06001572235545e0ca860a83e81325ea8110683ee7571c0dc88c
-
SHA512
e5d375f51bb7be78659300aa0c522daf162d701cabff4504d2a7191be7653544ebabab8b2f972f82c666688f7d699dd0fa19145d88ae822dde3bff6e123dd3d5
-
SSDEEP
1536:x0suZVOwFZFyHve9K8Vtq+/l7H0BEd/Hiqs49V7f5KCspeIdFP:JuXOwdQW9L/hQks49Vyes
Malware Config
Signatures
Files
-
6c290bfa33bb06001572235545e0ca860a83e81325ea8110683ee7571c0dc88c.exe windows x86
f816d92c9045ef5424542883ff8ae0cd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
LoadLibraryA
WaitForSingleObject
lstrcpyA
SwitchToThread
HeapAlloc
SetErrorMode
CreateThread
ExitProcess
user32
FindWindowW
GetMessageW
SetFocus
TranslateMessage
CreateWindowExA
ShowWindow
UpdateWindow
DefWindowProcW
DispatchMessageW
SetWindowPos
powrprof
GetPwrCapabilities
IsPwrShutdownAllowed
GetActivePwrScheme
wintrust
WintrustGetRegPolicyFlags
imagehlp
MapFileAndCheckSumW
ImageEnumerateCertificates
ntdll
memcpy
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE