Static task
static1
Behavioral task
behavioral1
Sample
6c471b0961d86495f497d1332dbf5785660f63b1ab468f2e2e26b2a8f0d6e38f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6c471b0961d86495f497d1332dbf5785660f63b1ab468f2e2e26b2a8f0d6e38f.exe
Resource
win10v2004-20220812-en
General
-
Target
6c471b0961d86495f497d1332dbf5785660f63b1ab468f2e2e26b2a8f0d6e38f
-
Size
350KB
-
MD5
0340b9726922e26591ab6b9780d6df31
-
SHA1
b6db03f1cde0be76753d03a54b201c62230d9f54
-
SHA256
6c471b0961d86495f497d1332dbf5785660f63b1ab468f2e2e26b2a8f0d6e38f
-
SHA512
7bbd5c79e0a00f4d42e9a079ee03f0d0a157ed656102deca11e82e5fd84c660a483cd0099861c991ccc1568969cf894f63a2b5ce70f709a7780375ca34f6dc62
-
SSDEEP
6144:rWsknd0QWzHy502wQhy9BvHaNiWw2q+UB8cVy9h/39O8t77vH7y4W:yFndWHLnQkrHaNiWw21hcyj3I8t77vGn
Malware Config
Signatures
Files
-
6c471b0961d86495f497d1332dbf5785660f63b1ab468f2e2e26b2a8f0d6e38f.exe windows x86
7879fc98b9b3e34dfa0e6b122040dd79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
GetExitCodeProcess
GetCommandLineA
CloseHandle
GetTickCount
SearchPathA
SetLastError
FindClose
CreateMutexA
GetLastError
Sleep
GetModuleHandleA
VirtualProtect
GetComputerNameA
GetDriveTypeA
GetVolumeInformationA
ReleaseMutex
FreeConsole
TlsGetValue
EnumResourceTypesA
shell32
DragAcceptFiles
ShellMessageBoxA
SheChangeDirA
ShellAboutA
DragQueryPoint
SHGetNewLinkInfo
DragFinish
DragQueryFileA
SHGetDiskFreeSpaceA
SHFree
SHGetSettings
SHAlloc
SHGetMalloc
StrChrA
dmutil
DisplayError
ShowMessage
TranslateError
SzwFromSza
SzwDupSzw
advapi32
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ