Static task
static1
Behavioral task
behavioral1
Sample
a6c9b528501b20005dac93cca4d4ca74b509327bebd5cf5be3ba1f2639c7ed1d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a6c9b528501b20005dac93cca4d4ca74b509327bebd5cf5be3ba1f2639c7ed1d.exe
Resource
win10v2004-20220812-en
General
-
Target
a6c9b528501b20005dac93cca4d4ca74b509327bebd5cf5be3ba1f2639c7ed1d
-
Size
131KB
-
MD5
0d1904080ade2f13fac1f2f41ea5f3ce
-
SHA1
cb72dd17b15a3e1df20aeb20584d85be4b1e5d9e
-
SHA256
a6c9b528501b20005dac93cca4d4ca74b509327bebd5cf5be3ba1f2639c7ed1d
-
SHA512
f94fb332ce53c614ac360b26e7b50e93c37f2262c983c4ab33a80146bdf43b6e693896aa9f33b6aab7214b15a0c74ef9c07fbbb114a47a72fe7b42c827cb6d26
-
SSDEEP
3072:88FjHqb8yXnLhwUFxIg9cKeRT9uZwuz5S3kOe:88ViHLYg+KETcMR
Malware Config
Signatures
Files
-
a6c9b528501b20005dac93cca4d4ca74b509327bebd5cf5be3ba1f2639c7ed1d.exe windows x86
90606bc84bc0ef222dc90132ad402a79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
SetLastError
TlsGetValue
CreateFileA
GetModuleHandleA
GetStdHandle
IsBadCodePtr
CreateFileMappingA
SetEvent
HeapDestroy
GetCommandLineW
ReleaseMutex
GetModuleFileNameA
ResetEvent
TlsAlloc
GetEnvironmentVariableA
GetACP
GetFileAttributesW
HeapCreate
lstrlenA
user32
DestroyMenu
DispatchMessageA
GetWindowLongA
DrawTextW
DispatchMessageA
FindWindowA
IsZoomed
GetClassInfoA
PeekMessageA
CallWindowProcW
IsWindow
GetSysColor
CreateIcon
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
timedate.cpl
CPlApplet
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE