Static task
static1
Behavioral task
behavioral1
Sample
6f335d7aacab5a6c75b839054e59318c17886e1317e9bda6a5a671ff7688b73e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6f335d7aacab5a6c75b839054e59318c17886e1317e9bda6a5a671ff7688b73e.exe
Resource
win10v2004-20220901-en
General
-
Target
6f335d7aacab5a6c75b839054e59318c17886e1317e9bda6a5a671ff7688b73e
-
Size
809KB
-
MD5
0d804c72ca832f4e2387964c74e6a529
-
SHA1
46c4a2757ff57333a357e7b556f60bd1a9d2339a
-
SHA256
6f335d7aacab5a6c75b839054e59318c17886e1317e9bda6a5a671ff7688b73e
-
SHA512
d477b28797e4130ca64bb4c1ee0522485c3a2befe6020a4bd2558f644d8488d08cc2ee33a88f0666c87bb841521d64a131ff832ff63e2c3d104d24ab66b7bd05
-
SSDEEP
12288:9XkpHuWLsU8ge0N+aTwEDQZZDT5vZEOBTy+qDzXC9I7++MSbPjDR8MSVSSP:98HuHHwDQZZDT5EXC9qhV58MSV/
Malware Config
Signatures
Files
-
6f335d7aacab5a6c75b839054e59318c17886e1317e9bda6a5a671ff7688b73e.exe windows x86
840e14308026f40e83e36faf196a82dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
SetEvent
VirtualProtectEx
SetLastError
OpenSemaphoreA
CreateSemaphoreW
GetFileSize
LoadLibraryA
GetFileAttributesW
GlobalFree
CreateFileA
GetStartupInfoA
CreateHardLinkA
GetProcessHeap
WriteConsoleA
HeapSize
CloseHandle
CreateMutexA
CreateDirectoryW
DeleteFileA
Sleep
lstrlenA
SetLastError
SetLocalTime
GetModuleFileNameA
comcat
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
ssdpapi
SsdpCleanup
FindServices
CleanupCache
SsdpStartup
wininet
FtpCommandW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE