Static task
static1
Behavioral task
behavioral1
Sample
c6db9f9b0a00237fea62d1e205f9c826fd7963fb5c124f2f69eb0cc7673c5a4f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6db9f9b0a00237fea62d1e205f9c826fd7963fb5c124f2f69eb0cc7673c5a4f.exe
Resource
win10v2004-20220812-en
General
-
Target
c6db9f9b0a00237fea62d1e205f9c826fd7963fb5c124f2f69eb0cc7673c5a4f
-
Size
790KB
-
MD5
82104c3fff6153b411f031e3679a9c40
-
SHA1
7257ff8d88699391e936305456a80f9345ea31df
-
SHA256
c6db9f9b0a00237fea62d1e205f9c826fd7963fb5c124f2f69eb0cc7673c5a4f
-
SHA512
441e3f8e4a2f11563771d5f5ef31ac4ab6a03cd652626c70e6e68c5061b468a4d437d7fd713be76e0ee30c781c4c87ae83e8ba774aa2f10fd0d003f08179c7fa
-
SSDEEP
24576:/pxr48pzXsedVwG9xVBxlOgq/+qasNBZ2AMWX/LM:/zrjsyVwExVBxlOLGKL21c/LM
Malware Config
Signatures
Files
-
c6db9f9b0a00237fea62d1e205f9c826fd7963fb5c124f2f69eb0cc7673c5a4f.exe windows x86
abdd92a2b5840012a2357be005dddb06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
IsBadStringPtrW
CreateMutexA
ReadConsoleA
GetLocalTime
GetLastError
GetCurrentDirectoryW
LeaveCriticalSection
GetStartupInfoW
lstrcpyA
lstrcatA
HeapCreate
ReadConsoleA
FormatMessageA
InitializeCriticalSection
FindResourceA
ReadConsoleA
SetFileAttributesA
CloseHandle
GetFileSize
ReadFile
msi
MsiCreateRecord
MsiCloseHandle
MsiAdvertiseProductA
MsiCloseAllHandles
user32
SetCursorPos
LoadCursorW
DispatchMessageA
IsCharLowerA
IsDialogMessageA
GetWindowTextA
PeekMessageW
IsZoomed
wsprintfW
IsWindow
PostMessageW
GetWindowLongW
SetFocus
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 775KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text1 Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 178B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE