Static task
static1
Behavioral task
behavioral1
Sample
a6d55de5dbda947aca16411e48d98da033168528c8e1971798708db6945d8087.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a6d55de5dbda947aca16411e48d98da033168528c8e1971798708db6945d8087.exe
Resource
win10v2004-20221111-en
General
-
Target
a6d55de5dbda947aca16411e48d98da033168528c8e1971798708db6945d8087
-
Size
310KB
-
MD5
2be9dba9096a0137f85a6bef9d679540
-
SHA1
20f8653d8b31abe84a0532012241947b5c5f9761
-
SHA256
a6d55de5dbda947aca16411e48d98da033168528c8e1971798708db6945d8087
-
SHA512
e4fd08b35a174d4babd1f9f2a5223b5b4339dc757359eecbcad4164470868a3df7a4843efc029d39741aa307daeff0e3dedfdadb9c4526710ba78a0db48b6373
-
SSDEEP
6144:BRZn/prLLJovMrM6J5u/AS+SwTG8Df3LbB2Vk8el:BRZ/5gyJ5oAS+TZ7bB2al
Malware Config
Signatures
Files
-
a6d55de5dbda947aca16411e48d98da033168528c8e1971798708db6945d8087.exe windows x86
f740b422f9d17d2aaac93a78b91699f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLongPathNameA
Sleep
lstrcmpA
WriteFileEx
GetACP
ExitProcess
GetModuleHandleW
GetPrivateProfileSectionA
FindResourceW
InterlockedIncrement
GetPrivateProfileIntA
WaitForSingleObject
VirtualAllocEx
GetPrivateProfileIntA
GetExitCodeProcess
Sleep
SetEnvironmentVariableA
lstrcpyW
GetDiskFreeSpaceW
InterlockedDecrement
LoadLibraryA
GetDiskFreeSpaceW
Heap32First
apphelp
ApphelpCheckExe
ApphelpCheckIME
SdbCreateMsiTransformFile
AllowPermLayer
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ