Static task
static1
Behavioral task
behavioral1
Sample
6d544d4b99ffd824b293c03006d1c206a18dfea36a2ae808509585b9b95b7fd9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d544d4b99ffd824b293c03006d1c206a18dfea36a2ae808509585b9b95b7fd9.exe
Resource
win10v2004-20220812-en
General
-
Target
6d544d4b99ffd824b293c03006d1c206a18dfea36a2ae808509585b9b95b7fd9
-
Size
137KB
-
MD5
2142057b6d977867b476da147c057c8e
-
SHA1
2457970980a05659c87371ab8c67a603589a698a
-
SHA256
6d544d4b99ffd824b293c03006d1c206a18dfea36a2ae808509585b9b95b7fd9
-
SHA512
cc574559ce02e905961b78cbaa3de28550342a8d1b9c80360a3792024c4dd39d2ddc8c6721dd6649ab8d937817d44468e24c2b71827b74cfa22c5217297590a1
-
SSDEEP
3072:hl5S6Wke0XjoPqQKRXwIjEjm0dptwgINanboKB:HM65TPQKRCjndvrboK
Malware Config
Signatures
Files
-
6d544d4b99ffd824b293c03006d1c206a18dfea36a2ae808509585b9b95b7fd9.exe windows x86
9faa98dcde969017d56bc0ff08e09d9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
LoadLibraryA
VirtualProtect
CreateDirectoryW
GetCommandLineA
SetEvent
OpenSemaphoreW
GetStartupInfoA
SetLastError
GetModuleFileNameA
GetTickCount
ReadConsoleW
WriteConsoleA
EnterCriticalSection
GlobalFree
RemoveDirectoryA
DeleteFileA
lstrlenA
GetEnvironmentStringsW
OpenMutexA
Sleep
CreateFileA
CloseHandle
SetLastError
CreateDirectoryA
user32
DispatchMessageA
GetClassInfoA
IsZoomed
GetSysColor
SetFocus
IsWindow
DestroyMenu
DispatchMessageA
CallWindowProcA
FindWindowA
PeekMessageA
GetWindowLongA
DrawTextA
cfgbkend
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllUnregisterServer
advapi32
RegCloseKey
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE