Static task
static1
Behavioral task
behavioral1
Sample
b6d15e64c6853364325da7f4d3568c3262babe3853f6f8fe6d661db8581a179a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6d15e64c6853364325da7f4d3568c3262babe3853f6f8fe6d661db8581a179a.exe
Resource
win10v2004-20220901-en
General
-
Target
b6d15e64c6853364325da7f4d3568c3262babe3853f6f8fe6d661db8581a179a
-
Size
102KB
-
MD5
09c0476b9cce4f1e5491297032c48090
-
SHA1
1433ba5a02b39c69d082d3712745bf4a2a294aeb
-
SHA256
b6d15e64c6853364325da7f4d3568c3262babe3853f6f8fe6d661db8581a179a
-
SHA512
5be71bb2f630cfe96da6a32129fdb9e6b026ea109a26941b6f6cf96924e1a620c3b4d784ab0404404f5e0ab067964362bb1dca1c5008136041124931496356aa
-
SSDEEP
1536:mSTegqu3fEC/iqH9zfjCliNNHcWOy3FZBj62MO1AqnBNy2xgkD/u56nukQzv:1Dl3fEC/iwlCE7j3F/DdnBA2KF5n
Malware Config
Signatures
Files
-
b6d15e64c6853364325da7f4d3568c3262babe3853f6f8fe6d661db8581a179a.exe windows x86
e2f53c035d87c43c6cf0184d4883168e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
HeapDestroy
GetModuleHandleA
CancelIo
DeleteFileW
GetCommandLineA
GetStartupInfoA
CloseHandle
VirtualQuery
Sleep
ResetEvent
CreateEventA
GetVolumePathNameA
GetTimeFormatA
FindResourceW
GetCommandLineA
TlsGetValue
CloseHandle
lstrlenA
GetEnvironmentVariableA
user32
FindWindowA
DestroyMenu
GetSysColor
CallWindowProcA
IsZoomed
DispatchMessageA
IsWindow
GetClassInfoA
DrawTextW
CreateIcon
PeekMessageA
DispatchMessageA
GetWindowLongA
psbase
SPDeleteSubtype
SPDeleteSubtype
SPDeleteSubtype
SPDeleteSubtype
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oiakqeq Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE