Static task
static1
Behavioral task
behavioral1
Sample
6b6e4b189f9f633babda9d922886c3f92702b9c3131f20ef64ee67109230237e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6b6e4b189f9f633babda9d922886c3f92702b9c3131f20ef64ee67109230237e.exe
Resource
win10v2004-20221111-en
General
-
Target
6b6e4b189f9f633babda9d922886c3f92702b9c3131f20ef64ee67109230237e
-
Size
164KB
-
MD5
60975387fc1ff9e3f59fcfd9d4215a7b
-
SHA1
20bfc18b86a982d2a4c2ed2fb0c6d41281e50302
-
SHA256
6b6e4b189f9f633babda9d922886c3f92702b9c3131f20ef64ee67109230237e
-
SHA512
b67a2b8498403e2cddb120a1aa5c464c8ea0edc56b014b21455a42a184559c86a482713509e668c562f44cddbb8930c11c567e2f21ae41cf2e0a563407b70d4e
-
SSDEEP
1536:nx2wJI3fAOfebaI3fAOfeb9I3fAOfeb9z:x3JefjGbaefjGb9efjGb
Malware Config
Signatures
Files
-
6b6e4b189f9f633babda9d922886c3f92702b9c3131f20ef64ee67109230237e.exe windows x86
98a171548f0cd1d2a09618322d0bf42c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
msvcp71
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
msvcr71
getenv
_stat
strcmp
strcpy
_c_exit
_exit
_XcptFilter
_cexit
__p___initenv
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
strcat
strrchr
strchr
calloc
strlen
exit
memset
free
_putenv
_strdup
malloc
kernel32
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
GetLastError
CreateProcessA
GetStartupInfoA
GetCurrentProcess
GetProcAddress
GetModuleFileNameA
CloseHandle
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JLUER Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE