Static task
static1
Behavioral task
behavioral1
Sample
6bb356d3b73b249684bd50a329cdfd345b18d1d464be1584f37319459cef0134.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6bb356d3b73b249684bd50a329cdfd345b18d1d464be1584f37319459cef0134.exe
Resource
win10v2004-20220901-en
General
-
Target
6bb356d3b73b249684bd50a329cdfd345b18d1d464be1584f37319459cef0134
-
Size
126KB
-
MD5
0d521713a4d89359753190c90dac6466
-
SHA1
5eebeae2d7d2fd6e97437b7f82136cb159704be9
-
SHA256
6bb356d3b73b249684bd50a329cdfd345b18d1d464be1584f37319459cef0134
-
SHA512
6f5d44eaae51e76d1fc4ff47bf046c6326f37bec692391be8893d5133b4132e1e311f5ea5e7b872bd97afd69e33018097a3de3065ca93dec89d052001f50da94
-
SSDEEP
3072:S8BMWVnykpNaihDd+pqi9nw6LcaqXJrteg4:bB7VykpNrhDdahnw2caatYg
Malware Config
Signatures
Files
-
6bb356d3b73b249684bd50a329cdfd345b18d1d464be1584f37319459cef0134.exe windows x86
068bdca9861b59a5d94d496213cd73e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
RemoveDirectoryA
GetLocaleInfoA
GetModuleHandleA
GetTickCount
IsBadWritePtr
VirtualProtect
FindClose
CreateDirectoryA
IsValidCodePage
FindResourceA
ResetEvent
GetExitCodeThread
GetProcessHeap
SetLastError
GetDriveTypeW
GetFileAttributesA
CancelIo
HeapSize
CreateMailslotW
GetFileAttributesA
MapViewOfFile
user32
GetWindowLongW
SetCursor
IsDialogMessageA
GetCapture
GetWindowTextW
DispatchMessageA
PostMessageW
LoadCursorA
wsprintfA
IsWindow
PeekMessageA
SetFocus
LoadImageW
ipsmsnap
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE