Static task
static1
Behavioral task
behavioral1
Sample
6a3e423f821a208d6b616203e6a8b89ea50b1b8d0e25204d19faa6186587912f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6a3e423f821a208d6b616203e6a8b89ea50b1b8d0e25204d19faa6186587912f.exe
Resource
win10v2004-20221111-en
General
-
Target
6a3e423f821a208d6b616203e6a8b89ea50b1b8d0e25204d19faa6186587912f
-
Size
195KB
-
MD5
b1376e2c85c2eb03947106385077588b
-
SHA1
16b326f21813145332c9937c235a57e9d9b5d8f9
-
SHA256
6a3e423f821a208d6b616203e6a8b89ea50b1b8d0e25204d19faa6186587912f
-
SHA512
f2b567641c60a6d6fc860c9404da266a7848c12c3b2384c7ead0c132177e10b054d01520ae0cae537169e882530847fb504208de95aa9953ca3e342e143dc9dd
-
SSDEEP
6144:ya4Ch1LzxNU32ttX4yfF9aF6Fbw6nG3j6:Z/zHU32nr+QvnE6
Malware Config
Signatures
Files
-
6a3e423f821a208d6b616203e6a8b89ea50b1b8d0e25204d19faa6186587912f.exe windows x86
c5fb6b532b56b95c4bfbdc72d75e085c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersionExA
GetLocalTime
FindClose
FindNextFileA
LoadLibraryW
FindFirstFileA
EnumResourceLanguagesA
GlobalAlloc
WaitForSingleObject
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
GetTickCount
GetTempPathA
ResetEvent
WaitForSingleObject
shell32
ord201
ShellExecuteA
advapi32
RegQueryValueExA
RegOpenKeyExA
ElfRegisterEventSourceW
RegSetValueExA
RegCreateKeyExA
RegCloseKey
Sections
.text Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ