Static task
static1
Behavioral task
behavioral1
Sample
6e2346627be3a8a8245b2ed9f535c1c497fe444c9c7be31c2ba7f6f59a03b0e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e2346627be3a8a8245b2ed9f535c1c497fe444c9c7be31c2ba7f6f59a03b0e2.exe
Resource
win10v2004-20221111-en
General
-
Target
6e2346627be3a8a8245b2ed9f535c1c497fe444c9c7be31c2ba7f6f59a03b0e2
-
Size
536KB
-
MD5
360b32269b854db3a4422435c88397de
-
SHA1
6c75ad0b94101ef5db23eac34ac4bb9b30546df0
-
SHA256
6e2346627be3a8a8245b2ed9f535c1c497fe444c9c7be31c2ba7f6f59a03b0e2
-
SHA512
e2bfe05c7da56b332262d936860ad0002602861129b9975d0e891bbb8229e5cdf690f680efc4aa0b1bf5ce9808dd633c75319744a224fb31a5586af6fb1526f5
-
SSDEEP
12288:8J4V0puvt8k7kEjINM10JDx5+sh8dJSJt:1Vfvm2aAKDx5fh8d
Malware Config
Signatures
Files
-
6e2346627be3a8a8245b2ed9f535c1c497fe444c9c7be31c2ba7f6f59a03b0e2.exe windows x86
2c695e3f4aa91cfe16d5e76aee0ff6f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
CreateFileMappingW
DeleteFileA
CloseHandle
GetDriveTypeW
CreateFileW
GetFileTime
LocalSize
GetConsoleAliasW
GetCommandLineA
FindClose
Sleep
IsDebuggerPresent
HeapCreate
DeviceIoControl
GetModuleFileNameW
LocalFlags
GetModuleHandleA
CloseHandle
lstrlenA
user32
DispatchMessageA
BeginPaint
LoadImageA
CallWindowProcW
IsZoomed
GetIconInfo
DestroyMenu
PeekMessageA
DispatchMessageA
DestroyWindow
IsWindow
GetWindowLongA
DrawTextW
dmcompos
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
rasapi32
DwCloneEntry
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 529KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ