Static task
static1
Behavioral task
behavioral1
Sample
6da09dcee57f8a0d5f2cf712284b90d9ac02c8b123c1f4f8580559aed5880e6b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6da09dcee57f8a0d5f2cf712284b90d9ac02c8b123c1f4f8580559aed5880e6b.exe
Resource
win10v2004-20220812-en
General
-
Target
6da09dcee57f8a0d5f2cf712284b90d9ac02c8b123c1f4f8580559aed5880e6b
-
Size
240KB
-
MD5
0b0efeffe2b64971a792d4ff19d08406
-
SHA1
1508869d0236be62b7d17f370305eca85a9e88a1
-
SHA256
6da09dcee57f8a0d5f2cf712284b90d9ac02c8b123c1f4f8580559aed5880e6b
-
SHA512
cea624e4bb4c9a01db0541ec50e7d533ca8217ca556266a7b06b1921a479066ee28a68e998c133fcd201e0fe00b152925ecf69b86bcbac34aa285ebe6f01bebc
-
SSDEEP
3072:gxnvICXdW+bacCEDNyS5UzlUuKJ3s/WwQij7Xd05eCJCNHce45DwkyHkR2/V:Wnwed2vINySiz6uJLTCJCZqyHkR2d
Malware Config
Signatures
Files
-
6da09dcee57f8a0d5f2cf712284b90d9ac02c8b123c1f4f8580559aed5880e6b.exe windows x86
0c5505af21cea94691c17d394b980327
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
GetProcAddress
LoadLibraryA
RtlZeroMemory
CreateThread
lstrcpyA
WaitForSingleObject
ExitProcess
ntdll
_wcsnicmp
user32
OpenClipboard
TranslateMessage
GetMessageA
DispatchMessageW
ole32
CoInitialize
comctl32
ord17
powrprof
GetActivePwrScheme
GetPwrCapabilities
clusapi
ClusterEnum
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 227KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE