Static task
static1
Behavioral task
behavioral1
Sample
6b968fba3ba74a04e1f1d9b82836d228e874ed76225f744f23d2dfabd0f32bcf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6b968fba3ba74a04e1f1d9b82836d228e874ed76225f744f23d2dfabd0f32bcf.exe
Resource
win10v2004-20220812-en
General
-
Target
6b968fba3ba74a04e1f1d9b82836d228e874ed76225f744f23d2dfabd0f32bcf
-
Size
182KB
-
MD5
19e13740b772bc759f9a1b5366ea1f34
-
SHA1
c5c8d2ba30ceaf20571c4eac828e41ef0965f297
-
SHA256
6b968fba3ba74a04e1f1d9b82836d228e874ed76225f744f23d2dfabd0f32bcf
-
SHA512
0f7c21ead099a2956785458268d3841c8fa83bc2b9fa2e3d34553cd6c98b07211a76cc003af27a1bbb3a14859f6c3184d554fb6681a08a9f19a5534ae6acb57f
-
SSDEEP
3072:I+RJBV2575eusnu4JuiTPqsn9pKZLR/M4U9bVmFBYySf/45IQRRoMwMUe3:IYJ32/rgJuimmqLRU4okFtSi3sM9
Malware Config
Signatures
Files
-
6b968fba3ba74a04e1f1d9b82836d228e874ed76225f744f23d2dfabd0f32bcf.exe windows x86
b5a08533d8511d7a8ec9b5d15b58e5ba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharUpperA
MessageBoxA
shell32
ShellExecuteA
shfolder
SHGetFolderPathA
shlwapi
PathFileExistsA
advapi32
ConvertSidToStringSidW
CryptAcquireContextA
CryptCreateHash
CryptGetHashParam
CryptHashData
LookupAccountNameW
RegCloseKey
RegCreateKeyExA
kernel32
CloseHandle
CopyFileA
CreateEventA
CreateFileA
DeviceIoControl
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FlushFileBuffers
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetComputerNameW
GetConsoleMode
GetCurrentThreadId
GetEnvironmentStringsA
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetSystemDirectoryW
GetTimeZoneInformation
GetVersion
GetVolumeInformationW
GlobalAlloc
LoadLibraryA
LoadResource
LocalFree
LockResource
MultiByteToWideChar
OpenProcess
ReadConsoleInputA
ReadFile
SetConsoleCtrlHandler
SetConsoleMode
SetEnvironmentVariableA
SetEnvironmentVariableW
SetFileAttributesA
SetFilePointer
SetStdHandle
SetThreadLocale
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteConsoleA
WriteFile
WritePrivateProfileStringA
msvcrt
_chdir
psapi
EnumProcessModules
EnumProcesses
GetModuleBaseNameA
GetModuleFileNameExA
Sections
AUTO Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DGROUP Size: 9KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 104KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ