Static task
static1
Behavioral task
behavioral1
Sample
6216162d84bec2830da508fb635fdde83a805a97279e97033b7015e3d23ddccc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6216162d84bec2830da508fb635fdde83a805a97279e97033b7015e3d23ddccc.exe
Resource
win10v2004-20220812-en
General
-
Target
6216162d84bec2830da508fb635fdde83a805a97279e97033b7015e3d23ddccc
-
Size
482KB
-
MD5
2406ccd4a03488f55bca4d928085f396
-
SHA1
c8c04df7cbf317c916009fa8a9c94f59b767cdd2
-
SHA256
6216162d84bec2830da508fb635fdde83a805a97279e97033b7015e3d23ddccc
-
SHA512
479f4636683c1ecdd6416894eae3a33cce5eb8b3a2e9c1cd46b102207e038629bd584f83363deac0d31db760d7078f3ffdfd2476f99d42ebd4dae660e392b8ad
-
SSDEEP
12288:q3VosvOMW04xOdPc6ze1/ajaQmvBvh5dvw7a:YosmxtF0O/aqv9G
Malware Config
Signatures
Files
-
6216162d84bec2830da508fb635fdde83a805a97279e97033b7015e3d23ddccc.exe windows x86
929effbda6606278ee10b6b2dc075144
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetCommandLineA
GetStdHandle
SuspendThread
ReadFile
GetCommandLineA
DeleteAtom
DeleteFileA
GetStartupInfoA
GetPriorityClass
CloseHandle
IsBadCodePtr
GetFileAttributesA
GetEnvironmentVariableA
HeapDestroy
FindAtomA
GetModuleHandleA
GetModuleFileNameA
GetProcessTimes
CreateMailslotW
user32
IsZoomed
FindWindowA
GetClassInfoA
GetWindowInfo
DispatchMessageA
GetWindowLongA
SetFocus
DispatchMessageA
DrawTextW
CallWindowProcW
DestroyMenu
GetSysColor
GetKeyState
DestroyMenu
msident
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ