Static task
static1
Behavioral task
behavioral1
Sample
6e84dd1c0a72d06ab120c7f4cc608c67fe180612dda47a14b08faeb15cd843f5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6e84dd1c0a72d06ab120c7f4cc608c67fe180612dda47a14b08faeb15cd843f5.exe
Resource
win10v2004-20220812-en
General
-
Target
6e84dd1c0a72d06ab120c7f4cc608c67fe180612dda47a14b08faeb15cd843f5
-
Size
143KB
-
MD5
223cd33c638900e87c28f8def3c26769
-
SHA1
752c7cc4728ae1e435dcc87f24c463d47eec888d
-
SHA256
6e84dd1c0a72d06ab120c7f4cc608c67fe180612dda47a14b08faeb15cd843f5
-
SHA512
343450153bc480801f66e8113d8e69373e212dbadc3d093a6ccce3440bf79ec9c270bf75e01d8f207e5dd773ff4923f06f2bcc8c0e37fa12569efff378020da8
-
SSDEEP
3072:Qi6BJLgOI56TE0j48wMnsfySiv6AEBLkYbPcOrmVw8BOoXf+:wJEYIOOfC6VNkYLcOyHb+
Malware Config
Signatures
Files
-
6e84dd1c0a72d06ab120c7f4cc608c67fe180612dda47a14b08faeb15cd843f5.exe windows x86
116202f5824d3e405de125735aee6b32
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumSystemCodePagesA
FindVolumeClose
GetStringTypeExW
FindAtomA
SearchPathW
GetEnvironmentStringsA
FreeLibraryAndExitThread
FindFirstVolumeA
GlobalGetAtomNameW
_lcreat
CreateNamedPipeA
GetCommMask
VirtualAlloc
GetThreadPriority
CreateFileMappingA
Toolhelp32ReadProcessMemory
CreateProcessA
SetConsoleCtrlHandler
GetComputerNameA
EraseTape
GetModuleHandleA
CloseHandle
ReadFile
LoadLibraryA
HeapReAlloc
GetOEMCP
GetACP
GetProcAddress
GetTimeZoneInformation
LCMapStringW
LCMapStringA
FlushFileBuffers
HeapAlloc
SetStdHandle
GetStringTypeW
GetStringTypeA
WriteFile
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetLastError
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
TerminateProcess
GetCurrentProcess
RaiseException
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
SetEnvironmentVariableA
user32
GetDCEx
GetWindowContextHelpId
RegisterClassExA
OemToCharBuffW
ValidateRgn
CharPrevA
SetShellWindow
GetTopWindow
GetIconInfo
SetKeyboardState
ClientToScreen
PostMessageW
DrawFrameControl
CheckRadioButton
UnregisterClassA
PostQuitMessage
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE