Static task
static1
Behavioral task
behavioral1
Sample
6c6d66145688f724a76dad723f6df557939d2354bf09f40f34a10d5976bc0f06.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6c6d66145688f724a76dad723f6df557939d2354bf09f40f34a10d5976bc0f06.exe
Resource
win10v2004-20220812-en
General
-
Target
6c6d66145688f724a76dad723f6df557939d2354bf09f40f34a10d5976bc0f06
-
Size
112KB
-
MD5
a196afdb516ef4fa7f1c1378f6a0cd60
-
SHA1
3776a7162460e8450654bda2be3d36ba9ee398d0
-
SHA256
6c6d66145688f724a76dad723f6df557939d2354bf09f40f34a10d5976bc0f06
-
SHA512
0233a99be0144ecf783f417a03e29c939e2eb83a7eaa2b91d69022efbbfc1e511cd0591478792b43f6b7e85d0d310bd3fa19b6797ff63abd5343e5fed71777a8
-
SSDEEP
1536:0aSf1gTcQaLq36KKdYxhR7ioc2GCokxIVZyL90h8IQ5sQv:5Sk/36KKdYxrioNGCokUox0yIvQv
Malware Config
Signatures
Files
-
6c6d66145688f724a76dad723f6df557939d2354bf09f40f34a10d5976bc0f06.exe windows x86
30979981bd338744e7ce4404f68edbe4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
ReadFile
SetFilePointer
WriteFile
CloseHandle
DeleteFileA
Sleep
WinExec
CreateFileA
GetFullPathNameA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
advapi32
CreateServiceA
CloseServiceHandle
OpenServiceA
StartServiceA
ControlService
DeleteService
OpenSCManagerA
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zaas Size: 768B - Virtual size: 768B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
300 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE