Static task
static1
Behavioral task
behavioral1
Sample
6d33930baed4cf8f9ba5a72c001df73ad6061324936e9d489122f42d3aa369aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d33930baed4cf8f9ba5a72c001df73ad6061324936e9d489122f42d3aa369aa.exe
Resource
win10v2004-20220812-en
General
-
Target
6d33930baed4cf8f9ba5a72c001df73ad6061324936e9d489122f42d3aa369aa
-
Size
20KB
-
MD5
685d7d6438c45913860c4e1aeaa6089d
-
SHA1
f7b1bbb3c0586389e8a3b9a49b942031a6d18c64
-
SHA256
6d33930baed4cf8f9ba5a72c001df73ad6061324936e9d489122f42d3aa369aa
-
SHA512
a100f0d98e7095538e717ea83f9fb708d5e9f55de20b46eecc1ff152b24c1ec58efcc5c47231e4fbcd0ef41fef69f740b15735a051c8594ab2ec459548c9dda8
-
SSDEEP
192:drbkTK1fTSKR0TV24+pIO8w+a9hOP1oy0Y14/:GKR0FNbas1KY1
Malware Config
Signatures
Files
-
6d33930baed4cf8f9ba5a72c001df73ad6061324936e9d489122f42d3aa369aa.exe windows x86
97b1c3804cde5f70b69133f41df4cde7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
FreeSid
AllocateAndInitializeSid
ws2_32
WSACleanup
WSAStartup
shell32
SHGetSpecialFolderPathA
msvcrt
fclose
_local_unwind2
fopen
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
_access
sprintf
strrchr
fwrite
kernel32
GetStartupInfoA
GetComputerNameA
GetProcessHeap
HeapAlloc
HeapFree
GetModuleHandleA
GetModuleFileNameA
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ