Static task
static1
Behavioral task
behavioral1
Sample
6ba8d1507ea48fbc7bd5a04384402fe6dd70b3c8a594b1ae19f416869d9ceebb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6ba8d1507ea48fbc7bd5a04384402fe6dd70b3c8a594b1ae19f416869d9ceebb.exe
Resource
win10v2004-20220901-en
General
-
Target
6ba8d1507ea48fbc7bd5a04384402fe6dd70b3c8a594b1ae19f416869d9ceebb
-
Size
168KB
-
MD5
c0a0151f2fbab8b74d3e482da8cb6df6
-
SHA1
5cbaee42a744484d9b47a553d8df247b177a1164
-
SHA256
6ba8d1507ea48fbc7bd5a04384402fe6dd70b3c8a594b1ae19f416869d9ceebb
-
SHA512
cb9c2659d50629910947f0b7b1f881d8fb6e9e0c5fafd0c206fa67cbde46bb74887141453e708d8e63d041c14654643185c5abf23f3f4323360175a92c90b662
-
SSDEEP
3072:Ze73bNNIgbdTrLiKf/KKuEXOqPyJmqyrUAr:KbNSgbdcQ1yYqyf
Malware Config
Signatures
Files
-
6ba8d1507ea48fbc7bd5a04384402fe6dd70b3c8a594b1ae19f416869d9ceebb.exe windows x86
cb0cb806a0ba2b2f0f8ee9cd7b20309e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupQueueDefaultCopyW
advapi32
GetNamedSecurityInfoW
kernel32
CompareStringW
GetModuleFileNameA
GetPriorityClass
GetTickCount
GetProcessVersion
GetCommandLineW
CreateEventA
GetModuleHandleW
lstrcmpA
VirtualAlloc
GetStdHandle
FreeLibrary
GetOEMCP
SetHandleCount
lstrlenW
HeapDestroy
WideCharToMultiByte
HeapCreate
WaitForSingleObject
SetEndOfFile
GetFileAttributesA
GetStringTypeW
CreateFileA
GetModuleHandleA
GetCurrentProcessId
GetVersionExA
RtlUnwind
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
ExitProcess
WriteFile
SetEnvironmentVariableA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetFileType
GetStartupInfoA
DeleteCriticalSection
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
RaiseException
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetCPInfo
GetACP
Sleep
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
HeapReAlloc
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
LCMapStringA
LCMapStringW
HeapSize
GetLocaleInfoW
GetTimeZoneInformation
CompareStringA
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ