Static task
static1
Behavioral task
behavioral1
Sample
6c7c577e675c0129ab2b0f7f95f32e2865b6f907cdd27ecfb8db7a1b60cac5a3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6c7c577e675c0129ab2b0f7f95f32e2865b6f907cdd27ecfb8db7a1b60cac5a3.exe
Resource
win10v2004-20221111-en
General
-
Target
6c7c577e675c0129ab2b0f7f95f32e2865b6f907cdd27ecfb8db7a1b60cac5a3
-
Size
112KB
-
MD5
22d7d42b72b5ed4fd80046dd27049300
-
SHA1
5a46e350feb25465e12bc0052bce2cac159b7a5f
-
SHA256
6c7c577e675c0129ab2b0f7f95f32e2865b6f907cdd27ecfb8db7a1b60cac5a3
-
SHA512
1477e7b3cf298e20419cd8fc0b2d29a7b78992a57d638459ad41cc3802e0d3a19aeaebc8b66b87142208ae3afe88a0d6a35fb3abaaef60b882d09dac13b952be
-
SSDEEP
1536:/mZccA/KvWCiuAqsQDi61Ji3lb9h2ISHPxC7pBJnE7xPaf5A9JXpSpU1FjOoZ/J:/m2bZKJTsBEHPAVbEFPq5IXp080E
Malware Config
Signatures
Files
-
6c7c577e675c0129ab2b0f7f95f32e2865b6f907cdd27ecfb8db7a1b60cac5a3.exe windows x86
597d3a1fd30b003b2ca5683aac6ed609
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
lstrcpyA
ExitProcess
GetModuleHandleA
GetCommandLineA
lstrlenA
LoadLibraryA
FreeLibrary
GetProcAddress
FreeResource
CloseHandle
WriteFile
LockResource
CreateFileA
SizeofResource
LoadResource
FindResourceA
DeleteFileA
RemoveDirectoryA
SetCurrentDirectoryA
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
SetFilePointer
ReadFile
GlobalFree
GlobalAlloc
GetLocaleInfoA
GetSystemDefaultLCID
GetVolumeInformationA
GetWindowsDirectoryA
Sleep
GetTickCount
lstrcatA
GetTempPathA
HeapFree
GetProcessHeap
HeapAlloc
user32
CharUpperA
wsprintfA
advapi32
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE