Static task
static1
Behavioral task
behavioral1
Sample
6c0b6f8f85bbe6298327760f7dc73564fa364eba6be1ddecbdd15e1098b81b71.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6c0b6f8f85bbe6298327760f7dc73564fa364eba6be1ddecbdd15e1098b81b71.exe
Resource
win10v2004-20220812-en
General
-
Target
6c0b6f8f85bbe6298327760f7dc73564fa364eba6be1ddecbdd15e1098b81b71
-
Size
170KB
-
MD5
103dac514aa340fa115575e6a140823a
-
SHA1
98f2a24cbde9cc0f8282c52bcd534b6262192a37
-
SHA256
6c0b6f8f85bbe6298327760f7dc73564fa364eba6be1ddecbdd15e1098b81b71
-
SHA512
a4a725387451b03ea38bd8a4bff10a9e0cc6161d9b2effef692c0812296aadd34df2d27dee445c9231fea0131af3162250bcbc17a96193d1abdcf1242bacb97d
-
SSDEEP
3072:humpfO6zCGsm1pil3WWWS0drNidD3nlLVyIdFqonBq/y4ptvXWN/c8KHFAZC:H/zCG51pPtNih3xV1aonRBo
Malware Config
Signatures
Files
-
6c0b6f8f85bbe6298327760f7dc73564fa364eba6be1ddecbdd15e1098b81b71.exe windows x86
75eee84fa29a5407768e207407d1115d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetThreadPriority
GetCurrentProcessId
GetLastError
GetCurrentProcess
GetStartupInfoA
FreeLibrary
GetModuleHandleA
GetModuleFileNameA
ExitThread
GetCurrentThreadId
LoadLibraryA
GetCommandLineA
GetProcessTimes
GetTickCount
Sleep
GetProcessHeap
GetCurrentThread
ExitProcess
GetPriorityClass
CloseHandle
user32
GetForegroundWindow
ReleaseDC
GetWindowLongA
IsWindowVisible
GetWindowTextA
UpdateWindow
GetWindowDC
GetFocus
GetSystemMetrics
GetWindow
ShowWindow
OpenIcon
GetActiveWindow
BeginPaint
CreateWindowExA
GetDC
GetWindowTextLengthA
RegisterClassA
GetClassLongA
advapi32
GetUserNameA
IsTextUnicode
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
version
VerQueryValueA
GetFileVersionInfoSizeA
VerLanguageNameA
GetFileVersionInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE