Static task
static1
Behavioral task
behavioral1
Sample
f6a6d6ab80445cd004c9a1a799b87fea27614f4f0030e01b9c956694ab892138.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f6a6d6ab80445cd004c9a1a799b87fea27614f4f0030e01b9c956694ab892138.exe
Resource
win10v2004-20220812-en
General
-
Target
f6a6d6ab80445cd004c9a1a799b87fea27614f4f0030e01b9c956694ab892138
-
Size
48KB
-
MD5
ebd6fffb3b056ceb4355e65586faee41
-
SHA1
767ad4317907700c5cfe3f523a66f15a6fd6f299
-
SHA256
f6a6d6ab80445cd004c9a1a799b87fea27614f4f0030e01b9c956694ab892138
-
SHA512
2c531105be554b81befb5879eb5d231b29b1ac8560ec029f168eec3191f15a0359dfeb7b8a7ae4b95d37d534a1202590e3cb1a75938cd488687abe90f27642d3
-
SSDEEP
768:0jM8mPZfee9Huspfeh1E6UVYoQXKCC6FQ:0jOFOsVeJUioK8y
Malware Config
Signatures
Files
-
f6a6d6ab80445cd004c9a1a799b87fea27614f4f0030e01b9c956694ab892138.exe windows x86
a8b7fcc771e868462767c3e4db451706
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
GetDriveTypeA
GetLogicalDrives
WaitForSingleObject
CreateProcessA
TerminateProcess
GetExitCodeProcess
GetFileSize
ReadFile
FindClose
FindNextFileA
FindFirstFileA
Beep
GetLogicalDriveStringsA
GetLocalTime
GetVersion
Process32First
CreateToolhelp32Snapshot
GetLastError
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
VirtualFreeEx
OpenProcess
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetCurrentProcess
CreateThread
ExitProcess
GetCurrentThreadId
GetModuleFileNameA
GetWindowsDirectoryA
Sleep
SetFileAttributesA
CopyFileA
WinExec
CreateFileA
SetFilePointer
WriteFile
CloseHandle
Process32Next
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetCommandLineA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeW
user32
MessageBoxA
ExitWindowsEx
PostThreadMessageA
advapi32
ControlService
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegisterServiceCtrlHandlerA
DeleteService
CreateServiceA
ChangeServiceConfig2A
StartServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
SetServiceStatus
StartServiceCtrlDispatcherA
ws2_32
gethostname
recv
send
gethostbyname
connect
WSACleanup
htons
bind
listen
accept
closesocket
setsockopt
socket
WSAStartup
WSASocketA
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ