Static task
static1
Behavioral task
behavioral1
Sample
a6c8b4138783a2d13af5a564ec684282d80cb8a3fd5bff3882b3d8a9ee8256b6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6c8b4138783a2d13af5a564ec684282d80cb8a3fd5bff3882b3d8a9ee8256b6.exe
Resource
win10v2004-20220812-en
General
-
Target
a6c8b4138783a2d13af5a564ec684282d80cb8a3fd5bff3882b3d8a9ee8256b6
-
Size
2.6MB
-
MD5
0d6be6926172adad6ffad860da0850e6
-
SHA1
9b18a3b17935c47e9b7406f3a4853bc403a10bf4
-
SHA256
a6c8b4138783a2d13af5a564ec684282d80cb8a3fd5bff3882b3d8a9ee8256b6
-
SHA512
40330a2a1ded6dfb9e6752e2aafcf166b20dcd73a781a3535f97efd12c68f956e26cfe558912aedfba6193a7bfbbe2ce71443343aa8d4da25e92d88af54b0208
-
SSDEEP
49152:2OBkmXmonyEen79NrQ5zW1yraeyIJVh8oo4d78GEd:2jSy79JQ5raZMVhnoW7VE
Malware Config
Signatures
Files
-
a6c8b4138783a2d13af5a564ec684282d80cb8a3fd5bff3882b3d8a9ee8256b6.exe windows x86
b9ed7556b3a787972bcbd0d3c1e6ef08
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
GetTickCount
GetSystemTimeAsFileTime
FreeResource
CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateProcessA
GetTempPathA
VirtualProtect
GetLocaleInfoA
GetStringTypeW
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetSystemInfo
user32
GetCursorPos
wsprintfA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ