Static task
static1
Behavioral task
behavioral1
Sample
c6d471c8deb8e781cafe222862d6f332c4648be4e0094c6287fe2fe6328e66ca.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c6d471c8deb8e781cafe222862d6f332c4648be4e0094c6287fe2fe6328e66ca.exe
Resource
win10v2004-20221111-en
General
-
Target
c6d471c8deb8e781cafe222862d6f332c4648be4e0094c6287fe2fe6328e66ca
-
Size
390KB
-
MD5
e97ba4324debc4afb9765a61a7af3280
-
SHA1
b1392e72a6342c0f75a06860c53bc33ebb642b3c
-
SHA256
c6d471c8deb8e781cafe222862d6f332c4648be4e0094c6287fe2fe6328e66ca
-
SHA512
f758f82751d24f01720555be9d04e62d2508498cc36cae4d1025cf3e9f91cc613f3c8d98b253920e956fce2d356b29fc8874fddab1c7bd426cd8346f86d09617
-
SSDEEP
12288:9MthnDQweEJQ5kF+NkIRJ4MC2QObW/1V:9MHnDDDuWKz1C2QObk
Malware Config
Signatures
Files
-
c6d471c8deb8e781cafe222862d6f332c4648be4e0094c6287fe2fe6328e66ca.exe windows x86
f1e087e51e5700f816e711fcc612b44d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
VirtualFree
CloseHandle
GetLastError
GetSystemTime
WriteFile
VirtualAlloc
GetModuleHandleA
FindResourceA
SuspendThread
CreateThread
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceExA
DeleteFileA
GetProcAddress
VirtualQuery
SetLastError
LoadLibraryA
LocalAlloc
GlobalFree
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
CreateDirectoryA
LocalFree
GetOEMCP
GetACP
Sleep
VirtualProtect
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
GetCPInfo
GetStringTypeW
user32
GetDesktopWindow
EnableWindow
GetDC
LoadBitmapA
MessageBoxA
FindWindowA
gdi32
GetObjectA
ole32
CoUninitialize
avifil32
AVIBuildFilterA
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 326KB - Virtual size: 745KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ