Static task
static1
Behavioral task
behavioral1
Sample
6dcdd4f97f573443a47024130f8387ce8bcfe9f3c39b0553403bd754fbbef64c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6dcdd4f97f573443a47024130f8387ce8bcfe9f3c39b0553403bd754fbbef64c.exe
Resource
win10v2004-20221111-en
General
-
Target
6dcdd4f97f573443a47024130f8387ce8bcfe9f3c39b0553403bd754fbbef64c
-
Size
153KB
-
MD5
1e73cd78f071099f86af95dcb9245420
-
SHA1
a6f97441aaf995f6842908537c041a3edc09e272
-
SHA256
6dcdd4f97f573443a47024130f8387ce8bcfe9f3c39b0553403bd754fbbef64c
-
SHA512
d13a89de2017e9ad31541df51b519b861af9f870fa48d5e786669730529734c15e5bb06be1c50d8e587f3776957a4008297abaa1a96bc901874ed3959196948d
-
SSDEEP
3072:t3c8U9jQq90v77WsYV+sPnPsHhC9gqbuZDeCO+Xo4hZHlvtXPCeVR2KyR:8VDPnPsHhCeh1344nlAy2KyR
Malware Config
Signatures
Files
-
6dcdd4f97f573443a47024130f8387ce8bcfe9f3c39b0553403bd754fbbef64c.exe windows x86
2c84814d8fc2cc567d65ba3c21293dcd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapSize
GetStringTypeA
SetFileTime
LeaveCriticalSection
CloseHandle
lstrcatA
GetModuleHandleA
SetFileTime
CreateEventA
lstrcpyW
GetLastError
IsBadWritePtr
ReadFile
SetFileTime
GetStartupInfoW
LoadLibraryA
GetExitCodeProcess
HeapCreate
GetFileSize
SetConsoleTitleA
InterlockedExchange
mstscax
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
shell32
DuplicateIcon
DragAcceptFiles
DragQueryFileA
SHGetMalloc
SHGetSettings
ExtractIconA
DragFinish
DllUnregisterServer
SHGetDiskFreeSpaceA
ShellAboutA
StrChrA
SHFree
ShellMessageBoxW
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 101B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ