Static task
static1
Behavioral task
behavioral1
Sample
6a71286382dbd4ba8fe882c8efc2637b98e52f284c6d231d92536ca170a4c72e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6a71286382dbd4ba8fe882c8efc2637b98e52f284c6d231d92536ca170a4c72e.exe
Resource
win10v2004-20220812-en
General
-
Target
6a71286382dbd4ba8fe882c8efc2637b98e52f284c6d231d92536ca170a4c72e
-
Size
41KB
-
MD5
6020a6c567263ffdc6d7e0a974c50e46
-
SHA1
23e120df34dcb3a5c230f56a8e18840715cb0067
-
SHA256
6a71286382dbd4ba8fe882c8efc2637b98e52f284c6d231d92536ca170a4c72e
-
SHA512
028c123ce71ab44ae5e37c8b459ba4e1b082d32042f5876620065edd54ba8fa5d028b971f0c83f524599b2acec7a326eb06cf950e6cd16b348dfb9e562a54c7d
-
SSDEEP
768:Yhmf0vB9BB0ySq4HHsPl3fzdRc+lLSzHmvmg:YhmfaVPl3LD7lXd
Malware Config
Signatures
Files
-
6a71286382dbd4ba8fe882c8efc2637b98e52f284c6d231d92536ca170a4c72e.exe windows x86
8b52fd1ccef5bb5b41ddfce1fe327186
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetVersionExA
InitializeCriticalSection
GetProcAddress
user32
EndDialog
DialogBoxParamA
SendMessageA
resutils
ResUtilGetEnvironmentWithNetName
ResUtilGetMultiSzProperty
ResUtilGetProperties
ResUtilGetPropertySize
ResUtilGetBinaryValue
ResUtilGetResourceDependency
ResUtilSetMultiSzValue
ResUtilSetPropertyTableEx
ResUtilVerifyPropertyTable
ResUtilGetResourceDependentIPAddressProps
ResUtilIsResourceClassEqual
ResUtilFindMultiSzProperty
ResUtilPropertyListFromParameterBlock
ResUtilAddUnknownProperties
ResUtilStopService
ResUtilDupParameterBlock
ResUtilDupString
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 959B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ