Static task
static1
Behavioral task
behavioral1
Sample
6bb5e753439500cd824b836b99f4df70b5d2f20962d8e70eebb98ef65873f719.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6bb5e753439500cd824b836b99f4df70b5d2f20962d8e70eebb98ef65873f719.exe
Resource
win10v2004-20221111-en
General
-
Target
6bb5e753439500cd824b836b99f4df70b5d2f20962d8e70eebb98ef65873f719
-
Size
181KB
-
MD5
206e5fe9c1275b01d2d0eb61e9281220
-
SHA1
76d09314f4c8e24454cb3f5673a1cfa717627397
-
SHA256
6bb5e753439500cd824b836b99f4df70b5d2f20962d8e70eebb98ef65873f719
-
SHA512
66dd229e5f4a07f48e96901e062648430fb06ee822ae80c8790a6d06af0a8879cfdd837707c827b8cd975863aee0db4a1c0502448689a1e01824ea09aa780a35
-
SSDEEP
3072:9J2sagiMkRPMfqkjl4jJ4aZ2Xs2lhP7HubyIET431WqlXW2kng:9os/iMkRPMSkc2cs99I1jp0g
Malware Config
Signatures
Files
-
6bb5e753439500cd824b836b99f4df70b5d2f20962d8e70eebb98ef65873f719.exe windows x86
1f9d26c9f1930f00367fdb505f9c2b0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FormatMessageA
GetModuleHandleA
CloseHandle
MultiByteToWideChar
CreateFileA
DeleteFileA
WriteFile
SystemTimeToFileTime
GetSystemTime
GetCPInfo
SetFilePointer
GetFileSize
GetLastError
ReadFile
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
msacm32
acmStreamConvert
acmFormatDetailsA
acmFormatTagDetailsA
acmStreamClose
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmFormatSuggest
winmm
mmioClose
mmioSeek
mmioOpenA
mmioDescend
mmioRead
mmioAscend
rpcrt4
UuidCreate
user32
CharToOemA
LoadStringA
msvcrt
tmpnam
??3@YAXPAX@Z
??2@YAPAXI@Z
printf
sscanf
fclose
fgets
fopen
_ftol
_mbscpy
_mbslen
_stricmp
_mbsicmp
strrchr
wcscpy
wcslen
wcscmp
_purecall
_CxxThrowException
__CxxFrameHandler
_EH_prolog
strncpy
_mbsrchr
sprintf
calloc
free
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
_controlfp
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE