Static task
static1
Behavioral task
behavioral1
Sample
6ce9f1ab2337f9a97f3849b6ea60a25d25700b6f5fa4e276bb429dff8daf4216.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6ce9f1ab2337f9a97f3849b6ea60a25d25700b6f5fa4e276bb429dff8daf4216.exe
Resource
win10v2004-20220812-en
General
-
Target
6ce9f1ab2337f9a97f3849b6ea60a25d25700b6f5fa4e276bb429dff8daf4216
-
Size
68KB
-
MD5
01ead282b9a381c1ad65f902eda03600
-
SHA1
40af08bb883d1b62bc9a052c2f75efd622ce5ac6
-
SHA256
6ce9f1ab2337f9a97f3849b6ea60a25d25700b6f5fa4e276bb429dff8daf4216
-
SHA512
fb4fe49f613386978e2db3ff91f8883438c677083fc19c73507697301e1d95b64bb2d5e2566a3529415a59819bb5e0bc354453d9a4932fe52bf2445ddcb15b66
-
SSDEEP
1536:KB5z9Q8WeIFx0fIeFq4mRYT9seAYXqnOs/pn/CQiid9MJ7CHqcu:KB53In0AG0TfYMqQB9UzZ
Malware Config
Signatures
Files
-
6ce9f1ab2337f9a97f3849b6ea60a25d25700b6f5fa4e276bb429dff8daf4216.exe windows x86
64322ebbcb60026a984b4b4afe62bf3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFileTime
IsBadWritePtr
HeapCreate
GetStartupInfoW
GetLastError
FormatMessageW
CloseHandle
GetModuleHandleA
GetFileSize
CreatePipe
SetFileTime
GetExitCodeProcess
FindResourceW
InitializeCriticalSection
lstrcatA
SetFileTime
LeaveCriticalSection
LoadLibraryA
ReadFile
lstrcpyA
CreateMutexW
msi
MsiCollectUserInfoA
MsiDatabaseCommit
MsiConfigureFeatureA
MsiAdvertiseProductW
user32
PeekMessageW
IsWindow
GetWindowRect
wsprintfW
SetFocus
GetWindowLongW
IsDialogMessageA
DispatchMessageA
PostMessageW
MessageBoxA
GetWindowTextA
IsZoomed
LoadCursorW
clbcatq
SetSetupSave
Sections
.text Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rich Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 129B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE