Static task
static1
Behavioral task
behavioral1
Sample
2c6cd6acde4fe960742f2c84ff83f3068ad4deba0587c70f0fe770e15b5c84de.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2c6cd6acde4fe960742f2c84ff83f3068ad4deba0587c70f0fe770e15b5c84de.exe
Resource
win10v2004-20220812-en
General
-
Target
2c6cd6acde4fe960742f2c84ff83f3068ad4deba0587c70f0fe770e15b5c84de
-
Size
129KB
-
MD5
52b69e419b72bb679c6073e2bee32dfc
-
SHA1
79cfb7bf209e7fac7dc0b0585d7e06732f355224
-
SHA256
2c6cd6acde4fe960742f2c84ff83f3068ad4deba0587c70f0fe770e15b5c84de
-
SHA512
f6d4db15f18f8d2b4ce66a5caea577cd7d22c9df2278a29b057777ff8ca27ae7aa43544af17107d65ac73a7e504c056d72d48a303cd076ed6df7b73333d9af7d
-
SSDEEP
3072:kPV2kZVvTFNMEE65D2rSbG0GHQrMcw2Bu6NE+e:ktNTPM2D2p0GH7aH
Malware Config
Signatures
Files
-
2c6cd6acde4fe960742f2c84ff83f3068ad4deba0587c70f0fe770e15b5c84de.exe windows x86
34074de4c5c2555c5f5b73380e12a416
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
_except_handler3
__set_app_type
_initterm
__p__commode
_controlfp
calloc
__getmainargs
_XcptFilter
free
__p___initenv
_adjust_fdiv
__setusermatherr
_exit
kernel32
GetProcAddress
DuplicateHandle
WaitForMultipleObjects
GetThreadLocale
GetModuleHandleW
GetCurrentProcess
FormatMessageA
GetCommandLineW
GetCPInfo
Sleep
GetProcessHeap
RtlUnwind
GetConsoleOutputCP
SetEnvironmentVariableA
VirtualProtectEx
SetStdHandle
lstrcpynA
GetTempFileNameA
CopyFileA
IsBadReadPtr
GetSystemInfo
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ