Static task
static1
Behavioral task
behavioral1
Sample
6f92dd1a5cdaced6fe9c93237871889a1e9c506be41ee2b3c9670cdfa2a7458c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6f92dd1a5cdaced6fe9c93237871889a1e9c506be41ee2b3c9670cdfa2a7458c.exe
Resource
win10v2004-20220812-en
General
-
Target
6f92dd1a5cdaced6fe9c93237871889a1e9c506be41ee2b3c9670cdfa2a7458c
-
Size
52KB
-
MD5
a2f8abc5258deb793d037197dc5708e0
-
SHA1
64fe739cb16dafe20b39083c5f0f02ae06202221
-
SHA256
6f92dd1a5cdaced6fe9c93237871889a1e9c506be41ee2b3c9670cdfa2a7458c
-
SHA512
951d808b1df298acc64c6333df6f614cf2e6f58c257cc31eb9949968b4a00f46662e8d37cfc5663874d5c2661f4570026b32d772ed8ab5d73da2722406ea9623
-
SSDEEP
768:xv771aaV+tE4N2M5ND9QHseWzagSkntFVc7+Lr2yFIvLmz:nwtNN2MHCMeYagSk6aLRIjm
Malware Config
Signatures
Files
-
6f92dd1a5cdaced6fe9c93237871889a1e9c506be41ee2b3c9670cdfa2a7458c.exe windows x86
d3baf92d65503336f9082526a691fef9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
WideCharToMultiByte
powrprof
EnumPwrSchemes
mfc42
ord6394
ord5450
ord823
ord3663
ord540
ord825
ord800
ord858
ord2818
ord5572
ord2915
ord535
ord537
ord5440
ord6383
msvcrt
__getmainargs
_controlfp
__CxxFrameHandler
atoi
_mbsicmp
printf
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
__p___initenv
_stricmp
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
user32
wsprintfA
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dsrmqwx Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE