Static task
static1
Behavioral task
behavioral1
Sample
6bb1abdb4b092a8ec486f549e5cc075ce848df044612b42dabfcadb9574a4a92.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6bb1abdb4b092a8ec486f549e5cc075ce848df044612b42dabfcadb9574a4a92.exe
Resource
win10v2004-20220812-en
General
-
Target
6bb1abdb4b092a8ec486f549e5cc075ce848df044612b42dabfcadb9574a4a92
-
Size
426KB
-
MD5
6c43ebce70936a4e17a884f28e24c2de
-
SHA1
2cc7ba0195159321d86dcdffaa7c8149152cb6ca
-
SHA256
6bb1abdb4b092a8ec486f549e5cc075ce848df044612b42dabfcadb9574a4a92
-
SHA512
653246aeeade32e6f217a8e3af3c5fdb58dd60e6c96110fe7d0426b70cc11b985c7a3df1e37cb9f02cb1bf4fe215f3a00126be9823841ea429509f05546a92ee
-
SSDEEP
12288:rg5TUgEq/ZqTS1F7jJjpit2CbTXYwHCu3Z+baQh:riJE/AF7jBpix/osCpbnh
Malware Config
Signatures
Files
-
6bb1abdb4b092a8ec486f549e5cc075ce848df044612b42dabfcadb9574a4a92.exe windows x86
15b0ca6814fc014c04eb3bb4299f4fba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
WriteFile
WideCharToMultiByte
GetVolumeInformationA
Sleep
CreateProcessA
ReadFile
MultiByteToWideChar
GetTickCount
GetProcAddress
CopyFileA
LoadLibraryA
GetModuleFileNameA
CreateMutexA
GetVersionExA
CloseHandle
GetTempPathA
FreeLibrary
GetFileSize
GetLastError
CreateFileA
WriteConsoleW
SetStdHandle
ReadConsoleW
LoadLibraryW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
DuplicateHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapFree
HeapAlloc
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
HeapReAlloc
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
CreateThread
ExitThread
LoadLibraryExW
RaiseException
RtlUnwind
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetStdHandle
GetModuleFileNameW
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
ReleaseSemaphore
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LCMapStringW
CreateFileW
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
ws2_32
getpeername
connect
inet_ntoa
WSAStartup
htons
recv
socket
closesocket
gethostbyname
send
Sections
.text Size: 319KB - Virtual size: 318KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ