Static task
static1
Behavioral task
behavioral1
Sample
6e4b2cb7ca90c99947b78fac66c56ad63e4cb1349f4b0340bfe916fb03eb06ed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e4b2cb7ca90c99947b78fac66c56ad63e4cb1349f4b0340bfe916fb03eb06ed.exe
Resource
win10v2004-20220812-en
General
-
Target
6e4b2cb7ca90c99947b78fac66c56ad63e4cb1349f4b0340bfe916fb03eb06ed
-
Size
301KB
-
MD5
1a31d7aa0c88fa25ff44c2424764ddd0
-
SHA1
a7ebd99e1492896984595d8c9f9f303776a7cf11
-
SHA256
6e4b2cb7ca90c99947b78fac66c56ad63e4cb1349f4b0340bfe916fb03eb06ed
-
SHA512
bc87e24b18c3979e5966866a51f4f1f9790284a15faa30b7f3b0c0cca6e4f14fa3aad220b5fd9ccdbcdf5fbf773b33fec4516f5b2a6cbaebf3667ba9977b7c31
-
SSDEEP
6144:2susJcj0kVUvsQgBC7FvEJK3cUTFpV6/dYQ+LPwoGdvdQJK2AoY:5VcIyygo7d3HBsO7mvdQJKhoY
Malware Config
Signatures
Files
-
6e4b2cb7ca90c99947b78fac66c56ad63e4cb1349f4b0340bfe916fb03eb06ed.exe windows x86
24aa743c5d63b0350a18d2729df32207
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsBadWritePtr
CancelIo
GetStdHandle
CreateMailslotA
RemoveDirectoryA
GetModuleHandleA
VirtualProtect
GetProcessHeap
GetCommandLineA
GetLocaleInfoA
SetLastError
GetDriveTypeW
HeapSize
WriteFile
SetLocalTime
ReleaseMutex
MapViewOfFile
CreateDirectoryA
GetFileAttributesA
DeleteFileA
ResetEvent
user32
SetFocus
SetCursor
PostMessageW
PeekMessageA
DestroyMenu
GetCaretPos
wsprintfA
LoadCursorA
GetWindowTextW
GetWindowLongW
DispatchMessageA
GetCapture
LoadImageA
filemgmt
DllUnregisterServer
DllRegisterServer
DllGetClassObject
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ