Static task
static1
Behavioral task
behavioral1
Sample
6d01918a4534f6a7dc12ef36dd2037fff70779f48de871197d7d84995ba6516e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6d01918a4534f6a7dc12ef36dd2037fff70779f48de871197d7d84995ba6516e.exe
Resource
win10v2004-20221111-en
General
-
Target
6d01918a4534f6a7dc12ef36dd2037fff70779f48de871197d7d84995ba6516e
-
Size
408KB
-
MD5
29760340e9a0adc98f031e644f6fc1cb
-
SHA1
78ffad3bc0178d3b3d8e0ce8817f30df53250078
-
SHA256
6d01918a4534f6a7dc12ef36dd2037fff70779f48de871197d7d84995ba6516e
-
SHA512
3db858daa38286bb023dad0f3802c18ba356e61bb703f8bf2a4daf18fe89628f49c6d1b4c1959d2090a7f2f36639bd119fcd49096aa4e29bfc27c382eb582074
-
SSDEEP
6144:9xczgl8pUVUi3IiA0PCc+rxtcfA3yyTJABZ+RRUQFJK7odAIol+L3s1fp4VPi4Vn:csCpHAgmf6yyVdRRUAIq8+MfC7+u7
Malware Config
Signatures
Files
-
6d01918a4534f6a7dc12ef36dd2037fff70779f48de871197d7d84995ba6516e.exe windows x86
a86734f6b094da7b19aaef4a66d31633
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
RtlZeroMemory
GetCommMask
DeleteFileA
FlushConsoleInputBuffer
GetConsoleFontSize
SetupComm
lstrcmpiW
LoadLibraryA
HeapWalk
GetConsoleCommandHistoryLengthA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
msdart
?_IsLocked@CSpinLock@@ABE_NXZ
?TryReadLock@CCritSec@@QAE_NXZ
?sm_lpOSVERSIONINFO@CMdVersionInfo@@0PAU_OSVERSIONINFOW@@A
??4CSpinLock@@QAEAAV0@ABV0@@Z
?_WriteLockSpin@CReaderWriterLock@@AAEXXZ
?ReadUnlock@CReaderWriterLock2@@QAEXXZ
?IsWriteLocked@CReaderWriterLock@@QBE_NXZ
?IsReadUnlocked@CLKRHashTable@@QBE_NXZ
?IsReadUnlocked@CLKRLinearHashTable@@QBE_NXZ
?_TryLock@CSmallSpinLock@@AAE_NXZ
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SGNXZ
?ReadLock@CReaderWriterLock@@QAEXXZ
clusapi
GetClusterNetInterface
CreateClusterGroup
GetClusterResourceNetworkName
GetClusterNetInterfaceState
GetClusterInformation
OpenCluster
CanResourceBeDependent
ClusterNetworkControl
ClusterRegQueryInfoKey
GetClusterNetInterfaceKey
batmeter
PowerCapabilities
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ