Static task
static1
Behavioral task
behavioral1
Sample
f6b5183ec565499f9acab7c8c9a2366151e2a1629c7e329530873efe80d547d0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6b5183ec565499f9acab7c8c9a2366151e2a1629c7e329530873efe80d547d0.exe
Resource
win10v2004-20220812-en
General
-
Target
f6b5183ec565499f9acab7c8c9a2366151e2a1629c7e329530873efe80d547d0
-
Size
112KB
-
MD5
0c2ef4dca8378bcd835faebe757475b0
-
SHA1
7449eda5cfd72c2fb823d9617a403389d14c305f
-
SHA256
f6b5183ec565499f9acab7c8c9a2366151e2a1629c7e329530873efe80d547d0
-
SHA512
7782baacc8d92e83c8f869dd8e3988ee36c28ebdfc4083b52776184bf7709ea5dc9200647bf0e25ebe07b4d62f417ac69710d2953b46b00290535ab2aa31c0b4
-
SSDEEP
1536:jilbz+LrT1Hqe0BtV3zkFARcNaIsR0fSWi3w2EUArNtrH:N3pRS3zkFuDIseMwh3xtr
Malware Config
Signatures
Files
-
f6b5183ec565499f9acab7c8c9a2366151e2a1629c7e329530873efe80d547d0.exe windows x86
85446f2705b1fe3b693374571d2ae956
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetStartupInfoW
GetStartupInfoA
GetCurrentThread
GetCurrentProcessId
InterlockedDecrement
GetModuleHandleA
QueryPerformanceCounter
InterlockedIncrement
GetCurrentProcess
CompareFileTime
GetModuleHandleW
VirtualAlloc
LocalFree
SetHandleCount
ReadFile
GetSystemInfo
lstrlenA
DeleteCriticalSection
GetVersionExW
TryEnterCriticalSection
FindFirstFileW
WaitForSingleObject
SetFilePointer
TlsFree
LoadResource
SetStdHandle
ExitProcess
HeapAlloc
GetFileAttributesA
GetEnvironmentStringsW
HeapCreate
LoadLibraryW
FreeLibraryAndExitThread
SetFilePointerEx
GlobalFree
HeapDestroy
LCMapStringW
LoadLibraryExW
LeaveCriticalSection
EnterCriticalSection
CreateEventW
GetStringTypeW
SetLastError
InterlockedCompareExchange
LocalAlloc
WideCharToMultiByte
InitializeCriticalSection
SizeofResource
FindClose
FreeEnvironmentStringsW
FreeLibrary
GetModuleFileNameA
WaitForSingleObjectEx
HeapSize
SetEndOfFile
LoadLibraryA
InterlockedExchange
GetFileAttributesW
GlobalAlloc
MultiByteToWideChar
lstrlenW
CreateFileA
WriteFile
FormatMessageW
HeapFree
RtlUnwind
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetCommandLineA
HeapSetInformation
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetProcAddress
DecodePointer
GetStdHandle
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
GetFileType
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
GetLastError
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
SetConsoleCtrlHandler
GetLocaleInfoW
HeapReAlloc
user32
GetSystemMetrics
ole32
OleLoadFromStream
CoCreateGuid
OleRun
CoInitialize
msi
ord46
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ