Static task
static1
Behavioral task
behavioral1
Sample
6f496ba90da97cecd8a51e54dadb517adcc4c3a725ab2836ea5833386960d8e1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6f496ba90da97cecd8a51e54dadb517adcc4c3a725ab2836ea5833386960d8e1.exe
Resource
win10v2004-20220901-en
General
-
Target
6f496ba90da97cecd8a51e54dadb517adcc4c3a725ab2836ea5833386960d8e1
-
Size
401KB
-
MD5
123da1463b19cccff651e2d8c7e903a3
-
SHA1
6e2ad96a319f405374ea261f32d4a924657761f5
-
SHA256
6f496ba90da97cecd8a51e54dadb517adcc4c3a725ab2836ea5833386960d8e1
-
SHA512
eaadc8f9bb535dfb146a8992d3b0db7b88f113db3a69a73966061fa60c8de262fea047b7305ca9b4c94330f59b834a42a74c09679c8f50291677a6bfd2709f93
-
SSDEEP
6144:1LkB+YLea42/rv5/mojecaPUF2iKmHPiZT:14+Oea42DvcPoDKWiZT
Malware Config
Signatures
Files
-
6f496ba90da97cecd8a51e54dadb517adcc4c3a725ab2836ea5833386960d8e1.exe windows x86
8233737cd3f8e85d1c68b084b88eabc7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
GetProcessHeap
GetWindowsDirectoryA
GetConsoleCP
GetLastError
VirtualAlloc
GetCurrentDirectoryA
GetWindowsDirectoryW
GetVersion
GetTickCount
CloseHandle
CreateFileA
HeapSize
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
GetModuleHandleW
OutputDebugStringW
GetComputerNameA
GetModuleHandleA
GetCommandLineW
WriteConsoleA
SetStdHandle
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleMode
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapReAlloc
RaiseException
user32
GetWindowTextLengthW
GetWindowRect
IsIconic
IsZoomed
GetWindowTextW
GetDesktopWindow
GetCursorPos
LoadBitmapW
GetCursor
GetProcessDefaultLayout
GetForegroundWindow
advapi32
RegOpenKeyExA
GetUserNameW
GetCurrentHwProfileA
GetCurrentHwProfileW
shell32
CommandLineToArgvW
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ