Static task
static1
Behavioral task
behavioral1
Sample
b6a6cbced367a209561133db68e6144b259f386b56d04e9109ff04704b813899.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6a6cbced367a209561133db68e6144b259f386b56d04e9109ff04704b813899.exe
Resource
win10v2004-20221111-en
General
-
Target
b6a6cbced367a209561133db68e6144b259f386b56d04e9109ff04704b813899
-
Size
248KB
-
MD5
66bb0ca41bce06ce9adb17d7afa33af3
-
SHA1
7decca1febc1f9536a4ed34b23cfb412c7c32bde
-
SHA256
b6a6cbced367a209561133db68e6144b259f386b56d04e9109ff04704b813899
-
SHA512
c90ee62e9ce465c72a5b33126c0eb5f58df1915ccb2d0c9d5ad84245b350cc7aa0739e8de75fda29146f5d630b7d0914fdfab8e4fcd3c6d369e55bb9bab95ad0
-
SSDEEP
3072:w5zIJivs9yMaC4rJaWffNXqjKO2NrZtw35rRg46DyoN5HJ+IEExoWFsWgobF9y5E:uz3vs9d94rJaKfTFawwoNpbFsnYr0a
Malware Config
Signatures
Files
-
b6a6cbced367a209561133db68e6144b259f386b56d04e9109ff04704b813899.exe windows x86
ace0c446540e55187165c1ecc8b22761
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassExW
GetCapture
GetPropA
GetScrollRange
SetWindowTextA
GetScrollPos
GetDesktopWindow
EnumChildWindows
gdi32
GetArcDirection
GetStockObject
CreatePolygonRgn
DeleteObject
GetRgnBox
GetRegionData
comctl32
ord17
advapi32
IsValidSecurityDescriptor
kernel32
LocalSize
GetLastError
GetTickCount
GetStartupInfoA
HeapFree
GetThreadLocale
HeapDestroy
GetEnvironmentVariableA
FreeLibrary
LoadLibraryA
GetProcAddress
DeleteCriticalSection
InitializeCriticalSection
LocalFree
LocalAlloc
SetFileAttributesA
HeapAlloc
HeapCreate
GetSystemTime
SetEndOfFile
Sections
.text Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ