Static task
static1
Behavioral task
behavioral1
Sample
6dbdd40f4809273c9700efb9f48dff17d39ff9c5214f9c589131dd8660ed79e8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6dbdd40f4809273c9700efb9f48dff17d39ff9c5214f9c589131dd8660ed79e8.exe
Resource
win10v2004-20221111-en
General
-
Target
6dbdd40f4809273c9700efb9f48dff17d39ff9c5214f9c589131dd8660ed79e8
-
Size
76KB
-
MD5
c439e827f700612a134445d10934c70c
-
SHA1
2d2db53b4a21b399c53f6082d01cda98c85af6bc
-
SHA256
6dbdd40f4809273c9700efb9f48dff17d39ff9c5214f9c589131dd8660ed79e8
-
SHA512
f220b663b6ee154cd29a8a8458f6951381bacb9141ae61d39ab5e703756e3193bdf01987cf7e4ebc57751cd9ace03bf3328a39b0b41df821f26eb65711fe56d7
-
SSDEEP
1536:X2loWP8d3/UL/vnkPz1HdWAMLpMblRC0Wcx8SoaoT6zVwYrWR/YL:muWP8d3/UL/vno19WA2UK0WU8SK+CB/Y
Malware Config
Signatures
Files
-
6dbdd40f4809273c9700efb9f48dff17d39ff9c5214f9c589131dd8660ed79e8.exe windows x86
d24f697472a07d40532030314531e442
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjects
RemoveDirectoryA
FindAtomA
RemoveDirectoryA
ClearCommBreak
ExitThread
FindClose
CreateSemaphoreW
GetModuleFileNameA
SetEndOfFile
GetFileType
AddAtomA
IsBadWritePtr
CreatePipe
GetCommandLineA
HeapCreate
SetVolumeLabelA
GetDriveTypeW
HeapFree
GetProcessHeap
CloseHandle
DeleteAtom
GetModuleHandleA
CreateDirectoryA
WriteFile
clbcatq
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
CoRegCleanup
msvidc32
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE