Static task
static1
Behavioral task
behavioral1
Sample
6f9751b1147e65c706d78dccd3818824e7f4c49b84483f18c6d67c3a4424d7da.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6f9751b1147e65c706d78dccd3818824e7f4c49b84483f18c6d67c3a4424d7da.exe
Resource
win10v2004-20221111-en
General
-
Target
6f9751b1147e65c706d78dccd3818824e7f4c49b84483f18c6d67c3a4424d7da
-
Size
870KB
-
MD5
cdff3d64e13058e42936c1d86e598667
-
SHA1
e6356eb7372ad0630074740bcba4643d2795264c
-
SHA256
6f9751b1147e65c706d78dccd3818824e7f4c49b84483f18c6d67c3a4424d7da
-
SHA512
ad542a69e1857c2a23b1241649e0fe0a2580bc06caec93317aaa3a87bb9098526d3cc1326b348f46c9964e0c3f0a055b2a338b20bdde6b165934f61c6dca9517
-
SSDEEP
24576:YKF4rwpQUfbnXgaEEQoPj4XuI/7V2ZrDScN63:YKmrIQAXgaEZoPMe20r6
Malware Config
Signatures
Files
-
6f9751b1147e65c706d78dccd3818824e7f4c49b84483f18c6d67c3a4424d7da.exe windows x86
27a4119b5fc2d05f913e7af8f4016cd2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
GetStdHandle
GetFileAttributesW
TlsAlloc
TlsGetValue
GetStartupInfoA
ResetEvent
lstrlenA
SetLastError
IsBadCodePtr
CreateFileA
GetCommandLineW
HeapCreate
GetModuleHandleA
GetEnvironmentVariableA
GetACP
GetModuleFileNameA
ReleaseMutex
SetEvent
CreateFileMappingA
user32
GetSysColor
IsZoomed
PeekMessageA
CallWindowProcW
DispatchMessageA
CreateIcon
DispatchMessageA
DrawTextW
GetClassInfoA
DestroyMenu
FindWindowA
GetWindowLongA
IsWindow
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
timedate.cpl
CPlApplet
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 862KB - Virtual size: 861KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ