Static task
static1
Behavioral task
behavioral1
Sample
b6dccb43954a3d09099ea26783ecc2c3648c2a9f83d29a363dd7806112b49e5f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6dccb43954a3d09099ea26783ecc2c3648c2a9f83d29a363dd7806112b49e5f.exe
Resource
win10v2004-20220812-en
General
-
Target
b6dccb43954a3d09099ea26783ecc2c3648c2a9f83d29a363dd7806112b49e5f
-
Size
452KB
-
MD5
6f146f890f7d589c81cc7f251b74271e
-
SHA1
811697fbfc4dbf155ddbb2ccba3f2fd7bbd6be6f
-
SHA256
b6dccb43954a3d09099ea26783ecc2c3648c2a9f83d29a363dd7806112b49e5f
-
SHA512
e3aac49770516e51ab6d94426440af85e84a58859116bf101aeb73d3a43fdcd859209101b51f94defe6a553169594225e32aef5708a235b534b521547499d916
-
SSDEEP
12288:BoXZRmf33hzczve0E948NddBDZRzfbDeDHoG2wHl:oPm/3STv8NL1rQH
Malware Config
Signatures
Files
-
b6dccb43954a3d09099ea26783ecc2c3648c2a9f83d29a363dd7806112b49e5f.exe windows x86
80d7df96dd1be76f6055085a58b85b3b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
GetDriveTypeA
SetLastError
CloseHandle
HeapFree
HeapCreate
SuspendThread
GetFileType
SetStdHandle
WriteFile
CreateDirectoryA
CreateSemaphoreW
IsBadWritePtr
RemoveDirectoryA
ResumeThread
GetCommandLineA
CreatePipe
GetModuleHandleA
SetVolumeLabelA
GetVersion
FindAtomA
CreateThread
GetModuleFileNameA
ExitThread
FindClose
uxtheme
CloseThemeData
GetThemeTextExtent
DrawThemeBackground
GetThemeColor
GetWindowTheme
GetThemeBool
DrawThemeEdge
SetWindowTheme
CloseThemeData
OpenThemeData
GetThemeTextMetrics
GetThemeSysSize
IsThemeActive
perfdisk
CloseDiskObject
CloseDiskObject
CloseDiskObject
CloseDiskObject
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 443KB - Virtual size: 443KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE