Static task
static1
Behavioral task
behavioral1
Sample
6d5a931168c02cda18f6c407759f156edf95a0735fc434d2405abdf9c9c6b183.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d5a931168c02cda18f6c407759f156edf95a0735fc434d2405abdf9c9c6b183.exe
Resource
win10v2004-20220812-en
General
-
Target
6d5a931168c02cda18f6c407759f156edf95a0735fc434d2405abdf9c9c6b183
-
Size
156KB
-
MD5
9317da4ea16d8f5451966721b4ebc950
-
SHA1
45d558ad8631b77a33d24f42418573f3386d643d
-
SHA256
6d5a931168c02cda18f6c407759f156edf95a0735fc434d2405abdf9c9c6b183
-
SHA512
bf768cda7f7e7fa2f7d2042c736af074ef4b488ce2247a0823a675ab870954799dfe6057b0f7488367051b2a3f11a8febee327b090b9b1e2513dc2d1fee7db59
-
SSDEEP
3072:5ml4n5SWjOwfvPYySuiE4yKgWKt+FogfA4Yha+LwCsu3ejaAVkuXYJnnL:5mlAixuiE4yKgWc+jA4Yw+ZsOOHXYJn
Malware Config
Signatures
Files
-
6d5a931168c02cda18f6c407759f156edf95a0735fc434d2405abdf9c9c6b183.exe windows x86
3234eeb539a31dd3cf2460e72754ae01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
FillConsoleOutputAttribute
SetConsoleScreenBufferSize
GetStdHandle
CloseHandle
OpenMutexA
Sleep
HeapSize
GetProcAddress
GetVersion
FlushFileBuffers
ReadFile
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
SetFilePointer
GetLastError
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
WriteFile
ExitProcess
HeapFree
SetConsoleTextAttribute
HeapReAlloc
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
VirtualAlloc
CreateFileA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetFileType
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
winmm
timeGetTime
wsock32
bind
inet_ntoa
recvfrom
sendto
getsockopt
socket
htons
WSACleanup
gethostname
gethostbyname
setsockopt
closesocket
WSAGetLastError
WSAStartup
htonl
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE