Static task
static1
Behavioral task
behavioral1
Sample
a6bb6df3432565d7a3f2a9ce5b99eb2a9837dafb1639fdbff1e53d271ed8766e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6bb6df3432565d7a3f2a9ce5b99eb2a9837dafb1639fdbff1e53d271ed8766e.exe
Resource
win10v2004-20220812-en
General
-
Target
a6bb6df3432565d7a3f2a9ce5b99eb2a9837dafb1639fdbff1e53d271ed8766e
-
Size
791KB
-
MD5
c626ec81fb47f5f2e52b3e000f17c8ba
-
SHA1
9be18ba70ba29d2592f8ac6415375bf67d686670
-
SHA256
a6bb6df3432565d7a3f2a9ce5b99eb2a9837dafb1639fdbff1e53d271ed8766e
-
SHA512
62413a2faca7160ae6fbc07bb7811cb5c6698d6ca5662cbf7c7a01d09d9e86c66f14d1a345e84e58d3b3eafd9afee61394a3d01a494602b6c7118c9963b3ad7e
-
SSDEEP
24576:4WgzjtfGnBuzrqwnjSEP2hVd1uROt2lSrk:4Wotm4zrRjSVOlSrk
Malware Config
Signatures
Files
-
a6bb6df3432565d7a3f2a9ce5b99eb2a9837dafb1639fdbff1e53d271ed8766e.exe windows x86
fef3bee679594686d661642fb8dc5f01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetCurrentProcessId
GetCurrentThreadId
GetCommandLineA
GetCurrentThread
GetModuleHandleA
GetLastError
GetTickCount
ExitProcess
VirtualAlloc
LeaveCriticalSection
OutputDebugStringA
HeapAlloc
CreateFileA
Sleep
FindClose
VirtualQuery
CreateFileW
HeapCreate
InitializeCriticalSection
GetTimeZoneInformation
CreateProcessA
TerminateProcess
FreeLibrary
SetEnvironmentVariableA
GetStringTypeW
GlobalLock
FindFirstFileW
GetSystemTimeAsFileTime
ReadFile
GetStartupInfoA
WriteFile
SetUnhandledExceptionFilter
InterlockedExchange
FindNextFileW
GetStringTypeA
WideCharToMultiByte
SetFilePointer
SetStdHandle
GetProcessHeap
GetProcAddress
FreeEnvironmentStringsW
MultiByteToWideChar
LockResource
LocalAlloc
GetEnvironmentStrings
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
LoadLibraryA
GetFileSize
GetModuleFileNameA
GlobalUnlock
GetEnvironmentStringsW
FlushFileBuffers
IsDebuggerPresent
SetEvent
GetModuleFileNameW
GetSystemInfo
SetHandleCount
ReleaseMutex
EnterCriticalSection
HeapFree
Sections
.text Size: 757KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ