Static task
static1
Behavioral task
behavioral1
Sample
f6812c48c7be75f7831be8a5791d961eee1c065e06e3a13be45636b7e22a34c2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6812c48c7be75f7831be8a5791d961eee1c065e06e3a13be45636b7e22a34c2.exe
Resource
win10v2004-20220812-en
General
-
Target
f6812c48c7be75f7831be8a5791d961eee1c065e06e3a13be45636b7e22a34c2
-
Size
256KB
-
MD5
5a75628586070f74238d7f0d723f0010
-
SHA1
a1c6e503bdb963c5bfb8b9ca015512b3932f4e71
-
SHA256
f6812c48c7be75f7831be8a5791d961eee1c065e06e3a13be45636b7e22a34c2
-
SHA512
435ab824ce837aff8f81fcc596937ab8b493e68aa63787205aeb469efc7097fa41903648d7e2b3706f728e0949774a5bc933c38150b21509f5061ba2383cea0d
-
SSDEEP
6144:lwWJUwoha/kK6lQ2f30RRf14U0awPQpEKpVB:FvIQ2P+lldv
Malware Config
Signatures
Files
-
f6812c48c7be75f7831be8a5791d961eee1c065e06e3a13be45636b7e22a34c2.exe windows x86
9e848cd633ef77ccbc89f83080d3ffa5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
CloseHandle
GetVersionExA
GetCurrentThread
GetLogicalDrives
lstrlenA
VirtualAlloc
WaitForSingleObject
ResetEvent
VirtualFree
DeleteFileA
GetOEMCP
GetStdHandle
WriteFile
LocalFree
SetEvent
GetCurrentDirectoryA
GetThreadLocale
GetCommandLineA
FatalExit
OutputDebugStringA
CreateSemaphoreA
GetVersion
LocalAlloc
advapi32
GetUserNameA
user32
PostMessageA
GetDesktopWindow
IsZoomed
CloseWindow
EndPaint
MessageBoxA
GetActiveWindow
GetDoubleClickTime
DispatchMessageA
GetClientRect
GetWindow
GetFocus
SetCapture
IsWindow
GetSystemMetrics
FindWindowA
GetMessagePos
GetDC
InSendMessage
SetDoubleClickTime
wsprintfA
BeginPaint
SendMessageA
CopyIcon
GetCursor
WaitMessage
GetForegroundWindow
IsWindowVisible
ntdll
memcpy
ole32
CoFreeAllLibraries
CoFreeUnusedLibraries
CoUninitialize
gdi32
GdiFlush
LineTo
shlwapi
SHReleaseThreadRef
shell32
DuplicateIcon
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ