Static task
static1
Behavioral task
behavioral1
Sample
6b6fb8b112e1003c08c2e417533fb2864cd9a1197b5fe61b8da1057a184b30a6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6b6fb8b112e1003c08c2e417533fb2864cd9a1197b5fe61b8da1057a184b30a6.exe
Resource
win10v2004-20220901-en
General
-
Target
6b6fb8b112e1003c08c2e417533fb2864cd9a1197b5fe61b8da1057a184b30a6
-
Size
134KB
-
MD5
6f0ba6bfd0f10e217d596e4eebfc8040
-
SHA1
c440de924a7e4c30febb44d0e83229cd0a35a61d
-
SHA256
6b6fb8b112e1003c08c2e417533fb2864cd9a1197b5fe61b8da1057a184b30a6
-
SHA512
46cb36bc40a95d699d3bf3cf64d46e224f6caf173777b42171c05d61f1e3e440f96a027247b8804a70c9af306eb9c7770fd581b9f6bfe7bea56ddee09b1cc530
-
SSDEEP
3072:VpPptUYXwAZ0qU5XGvcsCpexqNTqnWe/:VpPptUYXwAZ0qEGE3ZOW
Malware Config
Signatures
Files
-
6b6fb8b112e1003c08c2e417533fb2864cd9a1197b5fe61b8da1057a184b30a6.exe windows x86
31ea0af0355be10a85ab0d45b89fa949
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetProcessVersion
lstrcpyA
CreateIoCompletionPort
FindFirstVolumeMountPointW
TlsGetValue
UpdateResourceA
SetLocalTime
WriteFileEx
CreateDirectoryW
GetPrivateProfileStructA
WaitCommEvent
GetDiskFreeSpaceExW
FindClose
SetProcessWorkingSetSize
SetSystemTime
GetBinaryTypeW
GetWriteWatch
LocalFlags
CreateSemaphoreW
PostQueuedCompletionStatus
CompareStringW
SizeofResource
GetCalendarInfoA
OpenEventW
ChangeTimerQueueTimer
CreateEventA
GlobalUnWire
CreateMutexW
GetThreadSelectorEntry
WaitForMultipleObjects
GetCurrencyFormatA
CreateMailslotW
IsSystemResumeAutomatic
GetSystemInfo
SwitchToThread
OutputDebugStringW
user32
DefWindowProcW
ExcludeUpdateRgn
ChildWindowFromPoint
Sections
.text Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ootzsns Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE