Static task
static1
Behavioral task
behavioral1
Sample
6789d45b4e9c58d9244e9f9dfc445177de627923ad49915cc90d469cb946d898.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6789d45b4e9c58d9244e9f9dfc445177de627923ad49915cc90d469cb946d898.exe
Resource
win10v2004-20221111-en
General
-
Target
6789d45b4e9c58d9244e9f9dfc445177de627923ad49915cc90d469cb946d898
-
Size
332KB
-
MD5
62b0fa6200c4d7e756555243a448c9f0
-
SHA1
4ac7761fe3d0af1c4df85179e92addea288b55a5
-
SHA256
6789d45b4e9c58d9244e9f9dfc445177de627923ad49915cc90d469cb946d898
-
SHA512
33c3c6936243c9710f29a3068d72f52d1994c988b63ce9cf360359579a173b34541b76b078945dd83ebf629791162408b2bbc5754880b93f88435a6f7a2b66ec
-
SSDEEP
6144:jxpk7vKgJKO8ki6R0LAUAd6Mv0We8u9jzHz19dcJeZXo6uChYYlbuW/SW:1pk7igJKOZR0LAUI6P/hZvZXXu0YYlus
Malware Config
Signatures
Files
-
6789d45b4e9c58d9244e9f9dfc445177de627923ad49915cc90d469cb946d898.exe windows x86
4387ab4fc89e5d577147b0effbe4e479
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStrings
ExitProcess
_lread
_lopen
HeapAlloc
GetProcessHeap
GetModuleFileNameA
GetModuleHandleA
GetLocalTime
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersionExA
VirtualQuery
InterlockedExchange
TerminateProcess
GetCurrentProcess
GetProcAddress
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsAlloc
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
SetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
IsBadWritePtr
IsBadReadPtr
HeapValidate
EnterCriticalSection
LeaveCriticalSection
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
LoadLibraryA
DebugBreak
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
SetFilePointer
SetStdHandle
FlushFileBuffers
CloseHandle
user32
MessageBoxA
GetKBCodePage
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ