Static task
static1
Behavioral task
behavioral1
Sample
6837a6ee6bda55a1c4b92c0dd1b2e16369280055d50350272f096c1f3c738113.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6837a6ee6bda55a1c4b92c0dd1b2e16369280055d50350272f096c1f3c738113.exe
Resource
win10v2004-20221111-en
General
-
Target
6837a6ee6bda55a1c4b92c0dd1b2e16369280055d50350272f096c1f3c738113
-
Size
284KB
-
MD5
0de86a7bc0ce6be30f014b90f8f47b79
-
SHA1
15f71029e76dec83989c9534595c5428d4af7de3
-
SHA256
6837a6ee6bda55a1c4b92c0dd1b2e16369280055d50350272f096c1f3c738113
-
SHA512
638a8945ae9d150af09c26b1253c4ac610912a21651f05b62d3b49fef765a85d901ecefb45bcf264ea6cd9213fb2398eafcc2dc8836a74d741cc9357189622da
-
SSDEEP
6144:cjPTHZiFWIAl8Off93wwi/CqWQbffhw4:cjLHZic8OGCq3bf
Malware Config
Signatures
Files
-
6837a6ee6bda55a1c4b92c0dd1b2e16369280055d50350272f096c1f3c738113.exe windows x86
1d9239614bba522919217354a50ac3d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
CloseHandle
ExitProcess
VirtualAlloc
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
CreateFileA
FlushFileBuffers
SetStdHandle
SetFilePointer
WriteFile
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
RaiseException
GetProcAddress
HeapFree
GetLastError
GetTickCount
ReadFile
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetFileType
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
user32
DefWindowProcA
GetMessageA
TranslateMessage
PeekMessageA
SetCursorPos
ShowCursor
GetCursorPos
GetDC
UpdateWindow
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
gdi32
SetTextColor
GetStockObject
TextOutA
SetBkMode
ddraw
DirectDrawCreateEx
dsound
ord1
Sections
.text Size: 225KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 40KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE