Static task
static1
Behavioral task
behavioral1
Sample
c6554e70ee2cb4af605679d558c81ed84a160a530e324993b512e24f0ee39172.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6554e70ee2cb4af605679d558c81ed84a160a530e324993b512e24f0ee39172.exe
Resource
win10v2004-20221111-en
General
-
Target
c6554e70ee2cb4af605679d558c81ed84a160a530e324993b512e24f0ee39172
-
Size
18KB
-
MD5
1a6941eae2dae327ba3c2c4293d1b926
-
SHA1
a79152ff65625d6a04ff6a4db4ac5886e171fb93
-
SHA256
c6554e70ee2cb4af605679d558c81ed84a160a530e324993b512e24f0ee39172
-
SHA512
1b25a0bf9dca7b6115ce652c74318134f0e41c187015ccf20d91c7b60f37feab28e624c098e1b2fc43e48f2f6169aa588acf9b0177add118a001154e40f8e10f
-
SSDEEP
384:bC1ePg1nDlv5JCyFY0/+j5wuWorGlkpT1x/1heZhYBbtzB:buePg1lvyS/2wux5zeXcJzB
Malware Config
Signatures
Files
-
c6554e70ee2cb4af605679d558c81ed84a160a530e324993b512e24f0ee39172.exe windows x86
d05cbcafe0c17ae726d37aeb24111d21
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetComputerNameA
GetFileSize
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetShortPathNameA
GetStdHandle
GetSystemDirectoryA
GetThreadPriority
GetTickCount
GetVolumeInformationA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
CopyFileA
ReadFile
ResumeThread
RtlUnwind
RtlZeroMemory
CreateFileA
SetCurrentDirectoryA
SetFilePointer
SetThreadPriority
Sleep
SuspendThread
TerminateThread
CreateThread
WaitForSingleObject
WriteConsoleA
WriteFile
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
user32
DefWindowProcA
DestroyAcceleratorTable
DestroyWindow
DispatchMessageA
EnableWindow
EnumChildWindows
FindWindowA
GetActiveWindow
GetClassNameA
GetFocus
CallWindowProcA
GetMessageA
GetParent
GetSysColor
GetSystemMetrics
GetWindow
GetWindowLongA
GetWindowRect
IsChild
AdjustWindowRect
IsWindowEnabled
IsWindowVisible
LoadCursorA
LoadIconA
PostMessageA
RegisterClassA
SendMessageA
SetFocus
SetWindowLongA
SetWindowPos
ShowWindow
TranslateAccelerator
TranslateMessage
UnregisterClassA
wvsprintfA
CreateAcceleratorTableA
CreateWindowExA
gdi32
GetStockObject
CreateBrushIndirect
advapi32
GetUserNameA
RegCloseKey
RegCreateKeyA
RegSetValueExA
comctl32
InitCommonControls
crtdll
__GetMainArgs
exit
raise
signal
strcat
strchr
strncpy
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 636B - Virtual size: 636B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE