Static task
static1
Behavioral task
behavioral1
Sample
6b3891dea6d6d099fc6af462790176d0a1ac24b70b6fde00ceb8c37fe912b141.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6b3891dea6d6d099fc6af462790176d0a1ac24b70b6fde00ceb8c37fe912b141.exe
Resource
win10v2004-20220812-en
General
-
Target
6b3891dea6d6d099fc6af462790176d0a1ac24b70b6fde00ceb8c37fe912b141
-
Size
117KB
-
MD5
9852b7863ac81976775e1c6390b247c5
-
SHA1
3643daa06b8176d188813a78625aa8da12e23774
-
SHA256
6b3891dea6d6d099fc6af462790176d0a1ac24b70b6fde00ceb8c37fe912b141
-
SHA512
1e0937486786b3e0e2374486823801e2f5af661dee18276c45f46c0cb73d670fa433c756001a660da89ac2eb204dc4d10a68614b5745d31eb4b031fa9ddfc3d0
-
SSDEEP
3072:UtESdZPF5k/MLMkHPykXyy2pruuDwcZCAh90Afi6Ujv:UthPFO4vy8adyqctb
Malware Config
Signatures
Files
-
6b3891dea6d6d099fc6af462790176d0a1ac24b70b6fde00ceb8c37fe912b141.exe windows x86
ab6bc498a182ec6ccff016a792dbbcff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CallNamedPipeA
ClearCommError
ConnectNamedPipe
CreateFileA
CreateIoCompletionPort
CreateMutexA
CreateSemaphoreA
DefineDosDeviceA
DeleteFileA
DeviceIoControl
ExitProcess
FindAtomA
FindNextChangeNotification
GetAtomNameA
GetCommModemStatus
GetCommandLineA
GetConsoleCursorInfo
GetDiskFreeSpaceA
GetModuleHandleA
GetNamedPipeHandleStateA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetProcAddress
GetProcessTimes
GetProfileIntA
GetStartupInfoA
GetTempPathA
GetThreadPriorityBoost
GlobalUnfix
GlobalUnlock
MoveFileA
OpenEventA
OutputDebugStringA
ReadConsoleA
ReleaseSemaphore
SetEvent
SetFilePointer
SetUnhandledExceptionFilter
UnlockFile
VirtualAlloc
WritePrivateProfileSectionA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fputs
free
ftell
fwrite
malloc
memset
rewind
signal
strncpy
time
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE