Static task
static1
Behavioral task
behavioral1
Sample
c6a770ac22877c368662f9cd7713c8d0df72727643a8b677d9c4126624a55180.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c6a770ac22877c368662f9cd7713c8d0df72727643a8b677d9c4126624a55180.exe
Resource
win10v2004-20220901-en
General
-
Target
c6a770ac22877c368662f9cd7713c8d0df72727643a8b677d9c4126624a55180
-
Size
264KB
-
MD5
38db29eae9949a59645d2e52262ad328
-
SHA1
4187bae70c311142b481680965ccdf485c485750
-
SHA256
c6a770ac22877c368662f9cd7713c8d0df72727643a8b677d9c4126624a55180
-
SHA512
bc5fbcb75a7d40fa6ed5db08e0737b417bac9159255593049c85b83178b6ebae9bc3c3cbb1171c2a335154e0146e75a7609b6b5371952e7fcd7d313edab4fa74
-
SSDEEP
6144:nHx4eOV5lEE+Kh0zHoDh0T1867g8xPdck6zRgKtc42:nHfOPlEE+KhT69g8xd6cp
Malware Config
Signatures
Files
-
c6a770ac22877c368662f9cd7713c8d0df72727643a8b677d9c4126624a55180.exe windows x86
6d7e6bf9efb0c191ceb99a883e4f7c38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
lstrlenA
lstrcpyA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapFree
GetLastError
VirtualFree
VirtualAlloc
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
LCMapStringA
LCMapStringW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
CloseHandle
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ