Static task
static1
Behavioral task
behavioral1
Sample
6250723e9357a8451532d4f46bd36e1dc35b76db7dd7667fa452c20a709489f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6250723e9357a8451532d4f46bd36e1dc35b76db7dd7667fa452c20a709489f8.exe
Resource
win10v2004-20220812-en
General
-
Target
6250723e9357a8451532d4f46bd36e1dc35b76db7dd7667fa452c20a709489f8
-
Size
768KB
-
MD5
262312233931c3601a709e31b7425ecf
-
SHA1
50fe8710dc3a6fa13a4c5af8d7c558bed5914437
-
SHA256
6250723e9357a8451532d4f46bd36e1dc35b76db7dd7667fa452c20a709489f8
-
SHA512
070c0a209a4544c036623a7faef12b0029987d96c8bf4553a62397d714d62aa8d428751ae21ee6d08bdce2f63e232358ccf9fcf510715ab655729fbf6b368f2e
-
SSDEEP
12288:xMRRHEZMa5Vpr3zBMRf8TAxTQ5ZG7ZXCIeRh2xaEQ1K80tu3/z5YgfjAvrUWSm+2:YRJWVtKRUTAFSPslQ1K80q7Rjqrnk2
Malware Config
Signatures
Files
-
6250723e9357a8451532d4f46bd36e1dc35b76db7dd7667fa452c20a709489f8.exe windows x86
aab6c6a0d26acfb43fd24051b50d3bfc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
CreateDirectoryW
ReadConsoleW
GetProcessHeap
GetFileAttributesA
CreateFileA
MapViewOfFile
GetFileSize
GetTickCount
OpenSemaphoreA
SetLastError
GetStdHandle
DeleteFileW
GetLocalTime
LoadLibraryA
Sleep
GetStartupInfoA
GetPriorityClass
SetLastError
CreateSemaphoreA
SetEvent
VirtualProtect
HeapDestroy
CreateMutexW
CreateHardLinkW
clbcatq
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
sqlwoa
_CharUpper@4
_GetFileTitle@12
_CharLower@4
_DeleteFile@4
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE