Static task
static1
Behavioral task
behavioral1
Sample
6f62fd7c555d8d5bfb3b286fa91ee90897e1017d4cc20577cbd0c104f62c83ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6f62fd7c555d8d5bfb3b286fa91ee90897e1017d4cc20577cbd0c104f62c83ad.exe
Resource
win10v2004-20220901-en
General
-
Target
6f62fd7c555d8d5bfb3b286fa91ee90897e1017d4cc20577cbd0c104f62c83ad
-
Size
305KB
-
MD5
dd8041b7f98365e5d0ed9ca2b4c0ef67
-
SHA1
c44c4ca27526fb42ec81bcbd12b16f7cdf4ae0a9
-
SHA256
6f62fd7c555d8d5bfb3b286fa91ee90897e1017d4cc20577cbd0c104f62c83ad
-
SHA512
c23036641b8db721c26ca555d6ea035dcc4cd57b699ddbd10b58f00c8b149482fb5e09b1fa260ec70bb01647095bca9d47561ce076e5602b18702b779418ee64
-
SSDEEP
6144:pCtaA012+adiR5L9Q0J9ZShi08S50tI5vBX1WOjKh9FUUCjtx:8T01dZrL9Q0fZtCYIr8jUUCj
Malware Config
Signatures
Files
-
6f62fd7c555d8d5bfb3b286fa91ee90897e1017d4cc20577cbd0c104f62c83ad.exe windows x86
1913e5771b32bdbe139828b34d50d4d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetPrivateProfileStringA
TlsGetValue
GetEnvironmentVariableW
lstrlenW
GlobalFlags
ReleaseMutex
GetCurrentProcessId
FindAtomA
IsBadStringPtrW
HeapCreate
GetDriveTypeA
CreateEventW
GetCurrentThreadId
ReleaseMutex
FindClose
InitializeCriticalSection
LocalFree
GetFileTime
LoadLibraryW
user32
DrawTextA
CreateWindowExA
EndDialog
GetSysColor
IsWindow
GetSysColor
SetFocus
GetClassInfoA
DrawStateW
GetClientRect
GetKeyboardType
CallWindowProcW
DispatchMessageA
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ