Static task
static1
Behavioral task
behavioral1
Sample
6ffe35696dcc3cd0d459fb453b27a76074016df8692f60ce5ede28dd6c778d57.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6ffe35696dcc3cd0d459fb453b27a76074016df8692f60ce5ede28dd6c778d57.exe
Resource
win10v2004-20220901-en
General
-
Target
6ffe35696dcc3cd0d459fb453b27a76074016df8692f60ce5ede28dd6c778d57
-
Size
310KB
-
MD5
13bd346b91510f5b7b56508a61406560
-
SHA1
7a79b13ffd14ba5d307a34f5858d33282a32967c
-
SHA256
6ffe35696dcc3cd0d459fb453b27a76074016df8692f60ce5ede28dd6c778d57
-
SHA512
b4cc9a96c92ef254972e2e50d483ae48b4f4038475aae32661fa961bb91f5c77a6001d6fc244ec588a05f778c7d08df95b0a144159590d236de92acb8582507c
-
SSDEEP
6144:12sM7gmYsNf3HmWzCIVZDB2r+83DA+2zPk8R8Vber4hMsWYfhDyQeGM:1279FNf3mcbYr+D+2tRWCr4hvWYFLM
Malware Config
Signatures
Files
-
6ffe35696dcc3cd0d459fb453b27a76074016df8692f60ce5ede28dd6c778d57.exe windows x86
2b14f21c2dae79eee7a891ce38acc468
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentThread
SetCommBreak
VirtualProtectEx
GetCurrentProcess
GetStringTypeA
SetLastError
GetModuleHandleA
CreateEventA
RemoveDirectoryW
GlobalLock
GetPrivateProfileIntA
GetVersionExA
GetFileAttributesW
CreateDirectoryW
LocalFlags
GetFileAttributesW
DeviceIoControl
FindClose
HeapFree
CloseHandle
GetPrivateProfileSectionA
user32
GetWindowLongW
IsWindow
DispatchMessageA
PostMessageW
GetWindowTextW
IsZoomed
IsDialogMessageA
PeekMessageW
SetFocus
GrayStringW
wsprintfW
SetCursorPos
LoadCursorW
netshell
DllCanUnloadNow
DllRegisterServer
HrCreateDesktopIcon
DllGetClassObject
rasapi32
DwCloneEntry
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ