Static task
static1
Behavioral task
behavioral1
Sample
b6c3e43ab0cf970af604679672d046ee60c204a1a07b3e85c8b4dcbf6ad79151.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6c3e43ab0cf970af604679672d046ee60c204a1a07b3e85c8b4dcbf6ad79151.exe
Resource
win10v2004-20221111-en
General
-
Target
b6c3e43ab0cf970af604679672d046ee60c204a1a07b3e85c8b4dcbf6ad79151
-
Size
58KB
-
MD5
e38f108175876675f72b8038d8d9139b
-
SHA1
c43ff4def8c9bc3fbe983a47703c66733ea0e746
-
SHA256
b6c3e43ab0cf970af604679672d046ee60c204a1a07b3e85c8b4dcbf6ad79151
-
SHA512
f2d1baf7d63724d88b273c2444d679bf3efbb2ea732354f357dedf1199f26f51579ccaf1eafd2738f0342f9ccfc3d06ec004d0607c6d429d2fb340729e987914
-
SSDEEP
768:cHJ23AxD34Pzjia48fkB3XyrkN5qlMWs+M4qE0JugxQH+YqxmzSd:f0DU6xyrIomJDxnCtS
Malware Config
Signatures
Files
-
b6c3e43ab0cf970af604679672d046ee60c204a1a07b3e85c8b4dcbf6ad79151.exe windows x86
fa1f2f5255011bdaf055d6301e52853a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetShortPathNameW
GetVersion
SetEnvironmentVariableA
GetModuleHandleA
CreateDirectoryA
HeapFree
GetExitCodeProcess
SetFilePointer
DeleteFileA
GetConsoleTitleA
GetProcessHeap
CloseHandle
DeleteFileA
GetProcessHeap
GetModuleHandleW
CreateFileMappingW
SetCurrentDirectoryA
DeleteFileA
GetStringTypeW
GetStdHandle
HeapCreate
GetLastError
mstscax
DllCanUnloadNow
DllUnregisterServer
DllRegisterServer
DllGetTscCtlVer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataz Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rs Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ