Static task
static1
Behavioral task
behavioral1
Sample
6205b17216e11a28f382899d0690865a85e88559d41705dbbc6e6eb1b30dfd2b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6205b17216e11a28f382899d0690865a85e88559d41705dbbc6e6eb1b30dfd2b.exe
Resource
win10v2004-20220812-en
General
-
Target
6205b17216e11a28f382899d0690865a85e88559d41705dbbc6e6eb1b30dfd2b
-
Size
108KB
-
MD5
30905ac579d6f55c8c6093770e3f9d44
-
SHA1
f3b930fc48a6024dcff8c622914e204775b03503
-
SHA256
6205b17216e11a28f382899d0690865a85e88559d41705dbbc6e6eb1b30dfd2b
-
SHA512
a97b46d8cc87a933e72e6b03437fb11fdf676144057ff771b0f83501f4bfccb444e982da9eaeeb5c8c6952a43f2aeeef1a8cd075fb6111f3c16bd772ad9db265
-
SSDEEP
1536:WsxrOoiFvwgelpivF13mIZ8hfvi/nwZNNXahnjqPwgDj801m5ep:Wo/qelpVn3i/nH1j5gsfe
Malware Config
Signatures
Files
-
6205b17216e11a28f382899d0690865a85e88559d41705dbbc6e6eb1b30dfd2b.exe windows x86
baeb3d368b61d270ec4ab99a75abd229
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetCurrentDirectoryA
SetFileAttributesA
MulDiv
EnumCalendarInfoA
lstrcmpiW
GetACP
DeleteFileA
GetModuleFileNameA
GetEnvironmentStrings
GetExitCodeProcess
GetThreadLocale
CreateDirectoryA
GetProcAddress
CreateProcessW
GetTempPathA
GetFileAttributesW
GlobalReAlloc
CompareStringW
GlobalUnlock
GetModuleHandleA
DeleteFileW
GetModuleFileNameW
GetTempFileNameA
LoadResource
GetFileAttributesA
SizeofResource
VirtualProtect
RemoveDirectoryA
GlobalHandle
RtlMoveMemory
msvcrt
_initterm
__getmainargs
__p__fmode
__p___initenv
_except_handler3
__p__commode
_XcptFilter
__set_app_type
_adjust_fdiv
tan
_exit
_controlfp
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Aryg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ