Static task
static1
Behavioral task
behavioral1
Sample
c6348c25c00fb965f18c63b1c7f473ceb0cb29d92e565f96f88a9d9d1a54e75d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6348c25c00fb965f18c63b1c7f473ceb0cb29d92e565f96f88a9d9d1a54e75d.exe
Resource
win10v2004-20220812-en
General
-
Target
c6348c25c00fb965f18c63b1c7f473ceb0cb29d92e565f96f88a9d9d1a54e75d
-
Size
775KB
-
MD5
10a8bf569ee7da81a16dcf14eaf0d7d8
-
SHA1
5b467a01b63a5a027c85e784e25664d49bdc244e
-
SHA256
c6348c25c00fb965f18c63b1c7f473ceb0cb29d92e565f96f88a9d9d1a54e75d
-
SHA512
60aee14cbaafcb087da4f3958b3cde871743cc0d40736444f0bf08d58bf1d168f5d2122dcca7208ddb114139bbda80448bcfada9072921e742c10bf7d431419c
-
SSDEEP
12288:qmMYKEkmDyiZd47aiJPpcPkvQo7vZ2lU4DaFD2IiYxcd7h7EVLPVGgT4Og:SYKEkqXZM1JRpvEl5sg4csFP4O
Malware Config
Signatures
Files
-
c6348c25c00fb965f18c63b1c7f473ceb0cb29d92e565f96f88a9d9d1a54e75d.exe windows x86
b7a628c8ac8712dbbf6c157f82feb9b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
IsDebuggerPresent
CloseHandle
SuspendThread
SetEvent
DisconnectNamedPipe
GetModuleHandleA
GetStartupInfoA
WriteConsoleW
CreatePipe
GetCurrentDirectoryA
GetStdHandle
GetPriorityClass
ClearCommBreak
lstrlenW
WriteConsoleW
WriteConsoleW
CopyFileW
GetFileAttributesA
HeapCreate
lstrcpyW
msftedit
SetCustomTextOutHandlerEx
RichEditWndProc
RichListBoxWndProc
RichComboBoxWndProc
shell32
SHGetDiskFreeSpaceA
SHFree
StrChrA
SHGetSettings
ShellAboutA
DragQueryFileA
DuplicateIcon
ShellMessageBoxA
DragAcceptFiles
ExtractIconA
DragFinish
SHGetMalloc
DllUnregisterServer
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 766KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ