Static task
static1
Behavioral task
behavioral1
Sample
6c4dc42902774277f3661c738038921ac9c77ca76dbaf6c41075f03502f6fa5b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6c4dc42902774277f3661c738038921ac9c77ca76dbaf6c41075f03502f6fa5b.exe
Resource
win10v2004-20221111-en
General
-
Target
6c4dc42902774277f3661c738038921ac9c77ca76dbaf6c41075f03502f6fa5b
-
Size
434KB
-
MD5
453f149acfc731858af909b043c1cbb2
-
SHA1
5144f1857a72fcc0370237c808db09a27da01d02
-
SHA256
6c4dc42902774277f3661c738038921ac9c77ca76dbaf6c41075f03502f6fa5b
-
SHA512
8a973b8a7ba70a7f5a1d3474d5d341f60c225f4f257f3eebadedbedb6cae045d0a94b239773a4237dc3478300ff3edd9bf46ba9cf67183a30bd500d7155f9ae2
-
SSDEEP
12288:KV2/R6PiZLaoc+q40ZR6z3/VjzxPRshoQQ6emnnLA:KV2pPZLaClW4z3/V5uZQSn8
Malware Config
Signatures
Files
-
6c4dc42902774277f3661c738038921ac9c77ca76dbaf6c41075f03502f6fa5b.exe windows x86
d86c7b75ce9324bba224663c1248d745
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleTitleW
CloseHandle
WaitForSingleObject
DeleteFileA
WaitForMultipleObjects
GetEnvironmentVariableA
OpenThread
GetTickCount
GetTickCount
HeapCreate
FindClose
CreateFileA
CreateMutexW
HeapSize
Sleep
GetFileAttributesA
GetStartupInfoW
GetStdHandle
GetModuleHandleA
ReleaseMutex
SetLastError
GetCurrentDirectoryA
RemoveDirectoryW
GetLocalTime
ExitProcess
user32
FillRect
GetDC
MessageBoxA
GetClassInfoA
CallWindowProcW
DispatchMessageW
PeekMessageA
GetDC
DispatchMessageW
FindWindowW
GetWindowLongA
GetDC
GetSysColor
vbajet32
VBAGetExprSrv
VBAGetExprSrv
VBAGetExprSrv
VBAGetExprSrv
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 427KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ