Static task
static1
Behavioral task
behavioral1
Sample
6e6d3d931a9d33296c1f6e8418eaef70ea4488dc37c17ff25a6b39d6b52813ea.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6e6d3d931a9d33296c1f6e8418eaef70ea4488dc37c17ff25a6b39d6b52813ea.exe
Resource
win10v2004-20220901-en
General
-
Target
6e6d3d931a9d33296c1f6e8418eaef70ea4488dc37c17ff25a6b39d6b52813ea
-
Size
428KB
-
MD5
418dd4fbd8dae9a81eb9d5fa91a8ef85
-
SHA1
76cc600a458827b8658a2a51b3ec498cfb52c8c6
-
SHA256
6e6d3d931a9d33296c1f6e8418eaef70ea4488dc37c17ff25a6b39d6b52813ea
-
SHA512
099b7823f86b4b5b5691d4916112d0239611172dd39493d9bd86f9445770aa497ebbc8fbbc645f1e20364411910e2d72a46349a3438abc940da43070812ad117
-
SSDEEP
6144:sWIPTI15yhrrFFLG8rnVnn/6CcYU/Qt2s8SBRfPl6:B1SrxBG8rVitERXw
Malware Config
Signatures
Files
-
6e6d3d931a9d33296c1f6e8418eaef70ea4488dc37c17ff25a6b39d6b52813ea.exe windows x86
421ada7a8cfe0b089ee9ec6456232b39
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
DeleteFileW
GetCurrentProcess
CloseHandle
DisableThreadLibraryCalls
InterlockedIncrement
ReadFile
HeapAlloc
WriteFile
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
InterlockedDecrement
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
CopyFileA
FindFirstFileA
VirtualFree
GetCurrentProcessId
VirtualAlloc
GetProcessHeap
SetFileTime
user32
MessageBoxA
advapi32
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegCreateKeyW
ole32
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
CoCreateInstance
msvcrt
printf
shlwapi
SHGetValueW
Sections
.text Size: 404KB - Virtual size: 403KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ