Static task
static1
Behavioral task
behavioral1
Sample
6458985f2fabcf86228bd7ad03d4acd1fce06318929d285b3fdc4b306cb79d4a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6458985f2fabcf86228bd7ad03d4acd1fce06318929d285b3fdc4b306cb79d4a.exe
Resource
win10v2004-20221111-en
General
-
Target
6458985f2fabcf86228bd7ad03d4acd1fce06318929d285b3fdc4b306cb79d4a
-
Size
419KB
-
MD5
3a9be9d69ff59298d6bcd5aed758d3b9
-
SHA1
66dc32199c23f475c058b4e03f549c902de49da1
-
SHA256
6458985f2fabcf86228bd7ad03d4acd1fce06318929d285b3fdc4b306cb79d4a
-
SHA512
968f84f4d6845ecaf107959c49f5b66b3b539405991da25e648e17aef53f400fe76a7231fcd26f5a09a097bf6a3a22800d71c78e5bd92fb9a62090f6a162e77a
-
SSDEEP
6144:qEZcvlap41Fd4pZiK+v/S3lB67Lz2lVDBsJdNl3kLHWiJo/Vtyf40TNbUmslLUJo:aCXSAYu5BsJd3AIk40TNbUP2UZ
Malware Config
Signatures
Files
-
6458985f2fabcf86228bd7ad03d4acd1fce06318929d285b3fdc4b306cb79d4a.exe windows x86
8c779ea8acb8e8db1ac1d8ba4f18f85f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CloseWindow
IsCharAlphaA
CreateAcceleratorTableA
kernel32
GetCompressedFileSizeA
GetCurrentThread
ReadFileScatter
DeleteCriticalSection
CancelWaitableTimer
SetCommTimeouts
LeaveCriticalSection
FillConsoleOutputAttribute
SetConsoleMode
GetDiskFreeSpaceA
GenerateConsoleCtrlEvent
GlobalAddAtomA
GetACP
CreateNamedPipeA
GlobalFindAtomA
GetSystemInfo
ScrollConsoleScreenBufferW
WriteTapemark
IsBadReadPtr
SetFileTime
FileTimeToLocalFileTime
WritePrivateProfileSectionA
GetWindowsDirectoryW
ClearCommBreak
GetTempFileNameW
LoadLibraryA
SetPriorityClass
GlobalGetAtomNameA
QueueUserAPC
WritePrivateProfileStringA
MoveFileW
GlobalFindAtomW
CreatePipe
GetStringTypeW
IsDebuggerPresent
ReadConsoleA
GetPrivateProfileSectionW
SetupComm
GetEnvironmentStringsW
SetEndOfFile
VirtualFree
Sections
.text Size: 36KB - Virtual size: 345KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 369KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ