Static task
static1
Behavioral task
behavioral1
Sample
6c18d436449f6d3f6870489521303aca73704126558f1800640471a36eef4fe5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6c18d436449f6d3f6870489521303aca73704126558f1800640471a36eef4fe5.exe
Resource
win10v2004-20220901-en
General
-
Target
6c18d436449f6d3f6870489521303aca73704126558f1800640471a36eef4fe5
-
Size
230KB
-
MD5
311ad09ec3d455e428673e09113eb130
-
SHA1
03531387275c384ba7d78abbd07c29db70945602
-
SHA256
6c18d436449f6d3f6870489521303aca73704126558f1800640471a36eef4fe5
-
SHA512
639f4ed52f122d0a1af321a04546628f4bff61e3085e277edec9fa1ab3f319d1cec6d0529018f8b38a5d312891b1919a14ac5cbec678966a3112d5189f47416a
-
SSDEEP
3072:u1AJC1AmwZ3cZPd9YJV53ygKlp8oq54At8T0UygGhwOOEL07T0M6XK6URBXvV:dCu1cT9YJV53ygKYKT0U0hwOJg0nK99
Malware Config
Signatures
Files
-
6c18d436449f6d3f6870489521303aca73704126558f1800640471a36eef4fe5.exe windows x86
c84edd73dd58c33fade53ebad0fecba9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempFileNameA
LockResource
GetModuleHandleA
EnumResourceNamesA
CloseHandle
GetTempPathA
GetThreadContext
SetThreadContext
VirtualFree
VirtualQueryEx
CreateProcessA
TerminateProcess
GetProcAddress
VirtualAlloc
VirtualProtectEx
VirtualAllocEx
GetModuleFileNameA
WriteProcessMemory
ResumeThread
SizeofResource
Sleep
EnumResourceTypesA
WriteFile
LoadResource
lstrlenA
FindResourceA
CreateFileA
ReadProcessMemory
ExitProcess
user32
GetDC
EnumWindows
DrawTextA
IsIconic
PostQuitMessage
GetMessageA
DestroyWindow
UnregisterClassA
CreateWindowExA
ReleaseDC
DefWindowProcA
ShowWindow
DispatchMessageA
SystemParametersInfoA
IsWindowVisible
RegisterClassA
MessageBoxA
gdi32
Rectangle
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
SetBkMode
DeleteDC
SetTextColor
BitBlt
GetStockObject
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 223KB - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ