Static task
static1
Behavioral task
behavioral1
Sample
f6601e7ecd27cecf945ad59f5a8988804a85ca59cf0c6969ca276d4f55b075bf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f6601e7ecd27cecf945ad59f5a8988804a85ca59cf0c6969ca276d4f55b075bf.exe
Resource
win10v2004-20220812-en
General
-
Target
f6601e7ecd27cecf945ad59f5a8988804a85ca59cf0c6969ca276d4f55b075bf
-
Size
75KB
-
MD5
4418c358b3a8821e80de40f465be8b90
-
SHA1
c87a06e9fdf99f2a1527c1d3eacc51f756980847
-
SHA256
f6601e7ecd27cecf945ad59f5a8988804a85ca59cf0c6969ca276d4f55b075bf
-
SHA512
65d2a52b9a37b5dff54b368e7041bc262438a168b65fc70b22f10a8d3e8503502724b0731e14a5f168ecf10569590f94cc2da621c28f2b8d2c6da4609682db39
-
SSDEEP
1536:q5e1DU8MjRLeHFjgJ3+wJ53tKxHmitG8nfmmaK7z/z5XDKoxvyru:q5e1DU8M9gFjgJ3lb3sHmitlOodOpq
Malware Config
Signatures
Files
-
f6601e7ecd27cecf945ad59f5a8988804a85ca59cf0c6969ca276d4f55b075bf.exe windows x86
3a3c4cfe705b54dc3cbb460e6b92fae1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InitializeCriticalSection
IsBadWritePtr
ReadFile
CreateMutexW
GetLastError
GetStartupInfoW
GetModuleHandleA
LeaveCriticalSection
SetFileAttributesW
SetFileTime
lstrcpyA
CloseHandle
GetFileSize
lstrcatA
HeapCreate
GetCurrentDirectoryW
SetFileTime
SetFileTime
GetLocalTime
FormatMessageW
FindResourceA
msi
MsiCloseHandle
MsiCreateRecord
MsiAdvertiseProductA
MsiCloseAllHandles
user32
DispatchMessageA
GetWindowLongW
IsDialogMessageA
PeekMessageW
GetWindowTextA
SetFocus
IsZoomed
GetWindowRect
PostMessageW
IsWindow
LoadCursorW
SetCursorPos
wsprintfW
wldap32
ldap_add
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1024B - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE