Static task
static1
Behavioral task
behavioral1
Sample
6e324b81dc5ed3cc0adecfb88dd132876b12096f8530fc7b4ccfd67448f102c5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6e324b81dc5ed3cc0adecfb88dd132876b12096f8530fc7b4ccfd67448f102c5.exe
Resource
win10v2004-20220812-en
General
-
Target
6e324b81dc5ed3cc0adecfb88dd132876b12096f8530fc7b4ccfd67448f102c5
-
Size
846KB
-
MD5
233e94f06674b8b63889e854a4db9a5e
-
SHA1
573e8c2270521fbcf4fa27fe51869a57fd36875f
-
SHA256
6e324b81dc5ed3cc0adecfb88dd132876b12096f8530fc7b4ccfd67448f102c5
-
SHA512
5f203bf281fab553b3e67507694b95b4d337505fa2d97ccef9ae6b8406144071f6c1e8a3074fabec87a2db99e114246b069b76dccd2cd85283f1f2540bc35f50
-
SSDEEP
24576:07nMSXSXSFQofbtn9C1eJhSlSxUSxUSxUSx:3ccEbtnw1e8YUYUYUY
Malware Config
Signatures
Files
-
6e324b81dc5ed3cc0adecfb88dd132876b12096f8530fc7b4ccfd67448f102c5.exe windows x86
c50797549d8111fde569b028332d19fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
CreateFileA
GetFileSize
FindFirstFileA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetProcAddress
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
GetExitCodeThread
HeapCreate
VirtualFree
WriteFile
IsBadWritePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
LocalFree
lstrlenA
GetCurrentThread
GetProcessId
GetProcessVersion
HeapAlloc
InterlockedDecrement
VirtualAlloc
HeapDestroy
Sleep
oleaut32
SysAllocString
VariantClear
SysFreeString
user32
UpdateWindow
CreateWindowExA
PostQuitMessage
RegisterClassA
IsWindowVisible
IsWindowUnicode
GetWindowTextLengthA
CloseWindow
GetClientRect
ShowWindowAsync
DefWindowProcA
gdi32
SetBkColor
GetBkColor
OffsetClipRgn
GetClipBox
advapi32
RegQueryValueA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 777KB - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE