Static task
static1
Behavioral task
behavioral1
Sample
b6997f91516347475836837d1f38fd07ae80683b653cc400bd66eafad233bc76.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6997f91516347475836837d1f38fd07ae80683b653cc400bd66eafad233bc76.exe
Resource
win10v2004-20220901-en
General
-
Target
b6997f91516347475836837d1f38fd07ae80683b653cc400bd66eafad233bc76
-
Size
716KB
-
MD5
0c8e8e43e4dd439975c6b3a1bdc7b630
-
SHA1
c2cf73649be0f1aa2550d012761e1f5958b4d06a
-
SHA256
b6997f91516347475836837d1f38fd07ae80683b653cc400bd66eafad233bc76
-
SHA512
ad84aae863b41b82667a5ba5ff7218921bf85e118cbe706c9f30d6702163f815d2a88c1136740b0b51d628e9607b81d1b92afd4d58c3b1836bce02878edfd372
-
SSDEEP
12288:gG5gL3AMjCEyxd9cORKvyA5OI6mIBXIGxGKf/OyLE9ohlZWI+bqZHZq:g2dyvP/IBXIGpbLQoh6bWHZq
Malware Config
Signatures
Files
-
b6997f91516347475836837d1f38fd07ae80683b653cc400bd66eafad233bc76.exe windows x86
14d220571078512de66d381fd72a3c37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
GetStartupInfoW
GetNumberFormatA
ExitProcess
GetStartupInfoA
GetOEMCP
GetCommandLineA
GetCommandLineW
IsProcessorFeaturePresent
shlwapi
ChrCmpIA
comctl32
InitCommonControlsEx
iphlpapi
InternalSetIfEntry
user32
TranslateAcceleratorW
GetSystemMetrics
LoadCursorW
ReleaseDC
InvertRect
ReleaseCapture
PtInRect
GetDC
CheckRadioButton
MoveWindow
BeginPaint
EndPaint
DispatchMessageW
LoadAcceleratorsW
LoadStringA
DrawMenuBar
CreateWindowExW
DrawTextW
wsprintfW
GetMessageW
UpdateWindow
EnableMenuItem
LoadIconW
SendMessageW
ShowWindow
DefWindowProcW
GetWindowRect
SetCapture
IsZoomed
IntersectRect
RegisterClassW
SetDlgItemTextW
GetForegroundWindow
UnionRect
GetMenu
LoadBitmapW
GetWindowPlacement
CheckDlgButton
OffsetRect
IsIconic
GetDlgItem
FrameRect
GetDlgItemTextW
PostMessageW
DdeAccessData
IsDlgButtonChecked
MessageBoxW
FillRect
PeekMessageW
GetSubMenu
SetRect
InvalidateRect
MessageBoxA
WinHelpW
GetClientRect
DialogBoxParamW
EndDialog
GetDesktopWindow
WaitMessage
DestroyWindow
Sections
.text Size: 275KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 229KB - Virtual size: 609KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ