Static task
static1
Behavioral task
behavioral1
Sample
6b88d6c8ba6ce0d99ae5d4086297b7ed1a7d9095cf4a7a5a599ce6acb6c7e6b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b88d6c8ba6ce0d99ae5d4086297b7ed1a7d9095cf4a7a5a599ce6acb6c7e6b0.exe
Resource
win10v2004-20220901-en
General
-
Target
6b88d6c8ba6ce0d99ae5d4086297b7ed1a7d9095cf4a7a5a599ce6acb6c7e6b0
-
Size
124KB
-
MD5
f12b8021bf984ff261ce4568648e0979
-
SHA1
486826ad8215226dd0824a0cadf19be195645dfa
-
SHA256
6b88d6c8ba6ce0d99ae5d4086297b7ed1a7d9095cf4a7a5a599ce6acb6c7e6b0
-
SHA512
a0a18794a33890553daf1d608c0dcc44382480bba3d5d90b54e0a2300022affb574f51730a0751cee4dab3729f620c6dc12763f9fdf1e0504b178fc1f8034bd3
-
SSDEEP
3072:G2boCkqSLLt8Bf0Ggf6sVYAGmjqgsVrDrz9F:G2beo0GgisOAZjqFn9F
Malware Config
Signatures
Files
-
6b88d6c8ba6ce0d99ae5d4086297b7ed1a7d9095cf4a7a5a599ce6acb6c7e6b0.exe windows x86
5e1c312c9f8459d76cc8e2fd6d20bd42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameW
ExitProcess
LoadLibraryW
ReadFile
GetProcAddress
CreateFileW
GetModuleFileNameW
GetFileSizeEx
GetLastError
HeapFree
HeapAlloc
GetVersionExA
GetProcessHeap
GetStartupInfoW
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSection
Sleep
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
user32
CreateWindowExW
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ