Static task
static1
Behavioral task
behavioral1
Sample
6c26adaa4ab698dd28bda9a73142e7b4dcf7d9e1d1dc462334e39d5d09f89e71.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6c26adaa4ab698dd28bda9a73142e7b4dcf7d9e1d1dc462334e39d5d09f89e71.exe
Resource
win10v2004-20220901-en
General
-
Target
6c26adaa4ab698dd28bda9a73142e7b4dcf7d9e1d1dc462334e39d5d09f89e71
-
Size
294KB
-
MD5
934e0d1346819ccab944a770965e3f60
-
SHA1
d1c8e1950865ee069400202807e539a4c1d0d8eb
-
SHA256
6c26adaa4ab698dd28bda9a73142e7b4dcf7d9e1d1dc462334e39d5d09f89e71
-
SHA512
794082b90757dd74ea56866d0c0572dcf4a0b2c33677d2d33d00a0b75d2b6aef56886c249f41df37e4da187cf907f3933ddd1304bb7221966009167277366bde
-
SSDEEP
6144:qkA3GZRltKc+PZmSUrwfGWbjkHlakoQbZqV3XILueFfO7zmG:5CQR3UP0SWweWbYFBzEVHiea
Malware Config
Signatures
Files
-
6c26adaa4ab698dd28bda9a73142e7b4dcf7d9e1d1dc462334e39d5d09f89e71.exe windows x86
52ed3e4fe7c545b090ef5a0831258fec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPriorityClass
HeapCreate
WriteConsoleW
HeapDestroy
GetCurrentDirectoryA
DisconnectNamedPipe
CloseHandle
GetFileAttributesW
SuspendThread
CreatePipe
GetModuleHandleA
GetCommandLineA
WriteConsoleW
GetProcessHeap
GetStdHandle
WriteConsoleW
lstrcpyA
GetStartupInfoA
SetEvent
CopyFileW
lstrlenW
msftedit
RichEditWndProc
SetCustomTextOutHandlerEx
RichComboBoxWndProc
RichListBoxWndProc
shell32
DragAcceptFiles
ExtractIconA
SHGetDiskFreeSpaceA
StrChrA
DllUnregisterServer
ShellAboutA
SHGetMalloc
DuplicateIcon
ShellMessageBoxA
DragQueryFileA
SHFree
DragFinish
SHGetSettings
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 285KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE