Static task
static1
Behavioral task
behavioral1
Sample
6a90bcc487d7fc2ebd80c7aa19121fb7a8da676db257238b0282c8f355f87fc5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6a90bcc487d7fc2ebd80c7aa19121fb7a8da676db257238b0282c8f355f87fc5.exe
Resource
win10v2004-20221111-en
General
-
Target
6a90bcc487d7fc2ebd80c7aa19121fb7a8da676db257238b0282c8f355f87fc5
-
Size
32KB
-
MD5
131e60b411195360165eeaef1f80a6bb
-
SHA1
54d549bf58915e45b2771e7b5fc558ebc8b29ddb
-
SHA256
6a90bcc487d7fc2ebd80c7aa19121fb7a8da676db257238b0282c8f355f87fc5
-
SHA512
fcaf770bfceea1d6bf875489e98cf4fc2684819b2e18dd925b1a057637e56ee0d58b9a020391ebfb1482b1a550a0dde5675f76d1ffaf4a67726a4c2b1422a1a7
-
SSDEEP
384:VDGGskTLdHPXaj7NFJBMDOs0PPPQ0F+9uHbj4t4VrTJSWRQMjfxDqkSoo:AsHPXajlB3s0HI0FAuHbhxRtjpDXt
Malware Config
Signatures
Files
-
6a90bcc487d7fc2ebd80c7aa19121fb7a8da676db257238b0282c8f355f87fc5.exe windows x86
430a09678a4ca347c2dd590a76c1b72c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegOpenKeyExA
RegQueryValueExA
kernel32
AddAtomA
CloseHandle
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetComputerNameA
GetDriveTypeA
GetFileTime
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
MultiByteToWideChar
OpenFile
SetCurrentDirectoryA
SetFileAttributesA
SetFileTime
SetUnhandledExceptionFilter
Sleep
msvcrt
_mkdir
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_findclose
_findfirst
_findnext
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fflush
fopen
fprintf
fread
free
fwrite
getenv
malloc
memset
rand
remove
signal
sprintf
srand
sscanf
strcat
strcmp
strcpy
strlen
strstr
time
ole32
CoCreateInstance
CoInitialize
shell32
ShellExecuteA
shlwapi
PathFileExistsA
wininet
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetGetConnectedState
InternetOpenA
InternetQueryOptionA
InternetReadFile
InternetSetOptionA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE