Static task
static1
Behavioral task
behavioral1
Sample
6a06927d51246c2f206e32a4d14c0af5ef6d6ebe003e8047e207057f1a15d331.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6a06927d51246c2f206e32a4d14c0af5ef6d6ebe003e8047e207057f1a15d331.exe
Resource
win10v2004-20221111-en
General
-
Target
6a06927d51246c2f206e32a4d14c0af5ef6d6ebe003e8047e207057f1a15d331
-
Size
24KB
-
MD5
66528576763bbff39c40b30b35057190
-
SHA1
99deebeabc4b68ac7eaf349b4314ffbbf1374359
-
SHA256
6a06927d51246c2f206e32a4d14c0af5ef6d6ebe003e8047e207057f1a15d331
-
SHA512
5d722f49e5a33d9a519bb45d8f3e04d7e1e3cbe969abd84d6819b91ef50768b9ec2865f480ca1ed7b56b14a1375904bfe4bdf0f4d1989a99321ef865e52a2cea
-
SSDEEP
384:hoIRlQgktqYekvLyqRsjPdPyQMsUH4kVdjaLacmkC0GJsJxXSdqWoZDEWA:hoMkZDzlswQMsytjaLacmkLGKddm
Malware Config
Signatures
Files
-
6a06927d51246c2f206e32a4d14c0af5ef6d6ebe003e8047e207057f1a15d331.exe windows x86
e3652483bc29904576717521cef35c5f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
CloseHandle
CreateFileMappingA
GetFileSize
CreateFileA
UnmapViewOfFile
WinExec
GetTempFileNameA
GetTempPathA
Sleep
GetTickCount
GetSystemDirectoryA
GetProcAddress
OutputDebugStringA
GetPrivateProfileStringA
Process32Next
OpenProcess
Process32First
CreateToolhelp32Snapshot
LoadLibraryA
ExitProcess
GetPrivateProfileIntA
WritePrivateProfileStringA
GetVersionExA
FreeLibrary
GetLastError
GetModuleFileNameA
GetWindowsDirectoryA
LCMapStringA
WideCharToMultiByte
GetStringTypeW
RtlUnwind
MultiByteToWideChar
GetStringTypeA
LCMapStringW
user32
wsprintfA
MessageBoxA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE