Static task
static1
Behavioral task
behavioral1
Sample
6b1ec7d172958116a5f19edf87ea80a8744c5e0751e69634c08d52feee70be18.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6b1ec7d172958116a5f19edf87ea80a8744c5e0751e69634c08d52feee70be18.exe
Resource
win10v2004-20220812-en
General
-
Target
6b1ec7d172958116a5f19edf87ea80a8744c5e0751e69634c08d52feee70be18
-
Size
749KB
-
MD5
3b5cc4a20c7d804733e5ed178c846628
-
SHA1
1a3667eb5362dbed62a5066c32744f310c8aab0f
-
SHA256
6b1ec7d172958116a5f19edf87ea80a8744c5e0751e69634c08d52feee70be18
-
SHA512
81c40c5fb1ae6a49d3090d5d9b774c26648a1b9870f4279b664c3888202264ce6d807435caeb4ce08ff28f20ebf7df6c9ce4ed7423d337d5044d1b2e91a6b37a
-
SSDEEP
12288:Mpfdwk+xj67m5A/p6aNmlajPRTpeSJT1TGe6GhLglf5HIFa/bHZFBhCJIDOrT+pZ:MpfsBWp7jPtPFGeLsz4a/9FBhtQe5
Malware Config
Signatures
Files
-
6b1ec7d172958116a5f19edf87ea80a8744c5e0751e69634c08d52feee70be18.exe windows x86
0519d09b1da2ce11623a04b32d608252
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
CreateFileMappingW
ReleaseMutex
CreateMailslotW
GetCommandLineA
lstrlenA
GetModuleHandleA
RemoveDirectoryA
ResetEvent
WriteFile
GetFileType
FindClose
CreateDirectoryW
FindClose
OpenEventA
SetLocalTime
RemoveDirectoryA
HeapFree
Sleep
CreateEventW
SetEvent
SetStdHandle
WriteConsoleW
GetLastError
DeleteFileA
uxtheme
CloseThemeData
CloseThemeData
GetWindowTheme
SetWindowTheme
GetThemeTextMetrics
GetThemeTextExtent
GetThemeBool
DrawThemeEdge
GetThemeSysSize
IsThemeActive
DrawThemeBackground
OpenThemeData
GetThemeColor
cmcfg32
CMConfig
CMConfig
CMConfig
CMConfig
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ