Static task
static1
Behavioral task
behavioral1
Sample
6e1dcb0bb743c3bda49cbfb19d37ed932b8655438b8a00a3f69a2d02bbfe6caf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6e1dcb0bb743c3bda49cbfb19d37ed932b8655438b8a00a3f69a2d02bbfe6caf.exe
Resource
win10v2004-20221111-en
General
-
Target
6e1dcb0bb743c3bda49cbfb19d37ed932b8655438b8a00a3f69a2d02bbfe6caf
-
Size
325KB
-
MD5
359b736c3c079c85e39294b85282ac20
-
SHA1
0d5eb28da85adb2d2e4d108e3df4382fe3226a0c
-
SHA256
6e1dcb0bb743c3bda49cbfb19d37ed932b8655438b8a00a3f69a2d02bbfe6caf
-
SHA512
37d6bde0fb9c6f9237bc59da7eb5d170459fef811b17791a91eb6519a8315c615f73f110a5b76ca55c37e99f1ee5a6d3b20950c5308c3bf252d32d4187e0ea44
-
SSDEEP
6144:klxsaDRJOZGrh2sKKASTg65elEmjN7TGmUSSobZOUS7X1Ipw:WjDRqkhEKP4lfjFTGmzSobUU4r
Malware Config
Signatures
Files
-
6e1dcb0bb743c3bda49cbfb19d37ed932b8655438b8a00a3f69a2d02bbfe6caf.exe windows x86
5ee0d146292a4d3cd3e543dd755df065
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetWindowTextW
advapi32
RegQueryValueExW
shell32
ShellExecuteA
ws2_32
gethostbyaddr
iphlpapi
GetAdaptersInfo
wtsapi32
WTSRegisterSessionNotification
oleacc
LresultFromObject
gdi32
DeleteDC
winspool.drv
OpenPrinterW
oleaut32
VariantClear
Sections
.text Size: 107KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 217KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE