Static task
static1
Behavioral task
behavioral1
Sample
c6095346bb6c704c3b40a1b0cf837d807600a81747d570b76ab725618411a057.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6095346bb6c704c3b40a1b0cf837d807600a81747d570b76ab725618411a057.exe
Resource
win10v2004-20221111-en
General
-
Target
c6095346bb6c704c3b40a1b0cf837d807600a81747d570b76ab725618411a057
-
Size
747KB
-
MD5
b1a1ec6fd8705bf8134194f6e2756e4d
-
SHA1
aae3a8f0192b4b866c6378c4b1ce70ef4391b26d
-
SHA256
c6095346bb6c704c3b40a1b0cf837d807600a81747d570b76ab725618411a057
-
SHA512
de00ab0a8398c3d07436c63bf1b1c62c22a445cd55cfc34bc7353fc42286120c69122c155cc0024287d09cf52a8083ce88ab0fb2aee97b3006fceeb3b5caee5c
-
SSDEEP
12288:9RpKfztKOf8CSjQxFU+gvnOh8H3fOD+1LCR4x+vyHc4+5WKObk0WfvcZAs:9RpexTXSjQxv6XZ1tx+vyHc4LnRWfvcy
Malware Config
Signatures
Files
-
c6095346bb6c704c3b40a1b0cf837d807600a81747d570b76ab725618411a057.exe windows x86
55faf3b09c82834eb25c8cc0bcfb5e87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
CreateMutexA
GetModuleHandleA
CreateFileA
GetFileAttributesA
GetCurrentDirectoryA
SetEvent
GetStdHandle
CreatePipe
ExitProcess
WaitForSingleObject
HeapSize
ResetEvent
DeleteFileA
GetTickCount
OpenProcess
SetLastError
GetStartupInfoW
GetCommandLineW
GetEnvironmentVariableW
WaitForMultipleObjects
CloseHandle
VirtualAlloc
GetConsoleTitleA
FindClose
user32
GetSysColor
GetClassInfoA
PeekMessageA
GetDC
DispatchMessageW
CallWindowProcW
GetDC
GetWindowLongA
GetDC
FindWindowW
FillRect
MessageBoxA
DispatchMessageW
perfctrs
CloseNbfPerformanceData
CloseNbfPerformanceData
CloseNbfPerformanceData
CloseNbfPerformanceData
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ