Static task
static1
Behavioral task
behavioral1
Sample
6a0a806248c5a8a965c85d3f18e73cc18d03e205d647c3898df6c2186146e3f5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6a0a806248c5a8a965c85d3f18e73cc18d03e205d647c3898df6c2186146e3f5.exe
Resource
win10v2004-20220812-en
General
-
Target
6a0a806248c5a8a965c85d3f18e73cc18d03e205d647c3898df6c2186146e3f5
-
Size
53KB
-
MD5
0c886064ddf95f9b9b5a9880fa1a3a90
-
SHA1
dc3362a96967203b564524fb104e679cb16b2fc2
-
SHA256
6a0a806248c5a8a965c85d3f18e73cc18d03e205d647c3898df6c2186146e3f5
-
SHA512
fb0f7453615b5dc48c28f0359ca52b2c328317b91feec53bdfd2f481caf9e710e89f8f4b3f4c4cc3070f6829c63ce898206b89132381fe848b1ffc0d6375010d
-
SSDEEP
768:0Mc5CPEId4gFB0emL9hxIZPune47CZpHgedRggp9irT:0MAyFKNLF7CvHgeXggpk
Malware Config
Signatures
Files
-
6a0a806248c5a8a965c85d3f18e73cc18d03e205d647c3898df6c2186146e3f5.exe windows x86
327c3c13991809983e7a9487f6dde3b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
BeginPaint
GetClientRect
DrawTextA
EndPaint
DestroyWindow
DefWindowProcA
PostQuitMessage
PostMessageA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
LoadIconA
LoadCursorA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
kernel32
HeapAlloc
HeapFree
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
VirtualAlloc
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GlobalSize
SizeofResource
CreateThread
WaitForSingleObject
GlobalAlloc
FindNextFileW
Sleep
FindFirstFileW
FindClose
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetEnvironmentStrings
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
comctl32
InitCommonControlsEx
msimg32
AlphaBlend
GradientFill
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ