Static task
static1
Behavioral task
behavioral1
Sample
d6679b71d3808cad68e1cec5245e2a2ea8961d56a8abc892eda56133ac66a3b6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6679b71d3808cad68e1cec5245e2a2ea8961d56a8abc892eda56133ac66a3b6.exe
Resource
win10v2004-20220812-en
General
-
Target
d6679b71d3808cad68e1cec5245e2a2ea8961d56a8abc892eda56133ac66a3b6
-
Size
301KB
-
MD5
8498dd441da93e4510707839b008f450
-
SHA1
315fbb9a97da9dc56edcdcc7d57d03a0bdf3493d
-
SHA256
d6679b71d3808cad68e1cec5245e2a2ea8961d56a8abc892eda56133ac66a3b6
-
SHA512
9cbe1e6ef5f4ed7c5486c7f7ffb2facff0f7afa9c242449fe09b465be751baecc6afcef9c5ccbc6570836ad6a3bae60e622f40e7bc9463143585e7ca1491c531
-
SSDEEP
6144:iWnaYoyFyRFRnWlfNtiNqFTNY8OY+Ecljs0zB9YSJgmsC:haZ6IRZNMNYHDDzB9zJghC
Malware Config
Signatures
Files
-
d6679b71d3808cad68e1cec5245e2a2ea8961d56a8abc892eda56133ac66a3b6.exe windows x86
5aae65a43a72d80f0aa3327dbd3fb81d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
TlsGetValue
VirtualProtect
GetTickCount
SetLastError
GetStringTypeA
HeapSize
GetDriveTypeW
IsBadWritePtr
LocalLock
FindResourceA
GetCurrentProcess
IsValidCodePage
GetFileAttributesA
FindClose
MapViewOfFile
GetLocaleInfoA
GetFileAttributesA
GetModuleHandleA
CreateDirectoryW
GetExitCodeThread
RemoveDirectoryW
user32
IsDialogMessageA
LoadStringA
GetWindowTextW
SetCursor
PeekMessageW
LoadImageW
SetFocus
LoadCursorA
DispatchMessageA
PostMessageW
GetWindowLongW
IsWindow
wsprintfW
msctf
TF_InitSystem
DllUnregisterServer
DllCanUnloadNow
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE