Static task
static1
Behavioral task
behavioral1
Sample
6183a17341423fbb8cbd8220ae097198871c974d08b9ffc80798f78300b98573.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6183a17341423fbb8cbd8220ae097198871c974d08b9ffc80798f78300b98573.exe
Resource
win10v2004-20220812-en
General
-
Target
6183a17341423fbb8cbd8220ae097198871c974d08b9ffc80798f78300b98573
-
Size
191KB
-
MD5
5cc0c989868b67473876f06f4aff8802
-
SHA1
4099862bfbc65f0c42f880ae6a5e5bc0214f5ceb
-
SHA256
6183a17341423fbb8cbd8220ae097198871c974d08b9ffc80798f78300b98573
-
SHA512
553826883f843bdfa8f366ee89b7a39ae4fd7ac96ef3d4a8abb0e984a86b34f12d67f95572a9fec7c69436fc9adbe294b62b063a77ba4302707c32b48bfa3b3b
-
SSDEEP
3072:zNt1NX3O9Xn6O7c+P4Vek2txJroOeCyttjW7XBYN5FCHo4Z:5tva36orPBtxJroOeCy6j8W
Malware Config
Signatures
Files
-
6183a17341423fbb8cbd8220ae097198871c974d08b9ffc80798f78300b98573.exe windows x86
cbf4e9f7930ec855ff1a7abecf33dec1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_cexit
_exit
__p__fmode
__setusermatherr
_XcptFilter
__p__commode
strspn
__set_app_type
_controlfp
vswprintf
perror
_initterm
mbtowc
_ismbblead
exit
_amsg_exit
__getmainargs
kernel32
QueryPerformanceCounter
LocalLock
FindResourceA
VirtualFree
GetShortPathNameA
VerSetConditionMask
GlobalHandle
SearchPathW
DeleteFileA
user32
ClipCursor
DrawStateW
CharNextExA
GetWindowTextLengthW
VkKeyScanW
GetWindowLongW
DrawIcon
PostMessageA
GetClassInfoW
SetRectEmpty
Sections
.text Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ