Static task
static1
Behavioral task
behavioral1
Sample
a6cd4639c3f024f6ff4032ec9d0f12e5b760cccb8e7f04743f06857b3054fcaa.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a6cd4639c3f024f6ff4032ec9d0f12e5b760cccb8e7f04743f06857b3054fcaa.exe
Resource
win10v2004-20221111-en
General
-
Target
a6cd4639c3f024f6ff4032ec9d0f12e5b760cccb8e7f04743f06857b3054fcaa
-
Size
277KB
-
MD5
f85980268ff6ae53c8f8c9623d43d3ff
-
SHA1
e9f7cbadc2e8f9b10a68fbd9935bdb7abc767f4c
-
SHA256
a6cd4639c3f024f6ff4032ec9d0f12e5b760cccb8e7f04743f06857b3054fcaa
-
SHA512
e94544267f5e01a5aad6c61e10ec01abac90433cd114f7c1b6067b0d8a71d5d6c8688bf5f12fc2a57d216fe278b9ec6e777b19be445527a13dfb4512667e0bff
-
SSDEEP
6144:37ODM52uIXRl+z8KYT7wpVU/xAIHnlAK+enpxQMu+Nh:36wAuIXRI67KC/2YlAK+enHQMr/
Malware Config
Signatures
Files
-
a6cd4639c3f024f6ff4032ec9d0f12e5b760cccb8e7f04743f06857b3054fcaa.exe windows x86
1f8c2ca4b7197b535133dbd82dca5581
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
QueryPerformanceCounter
DeviceIoControl
AddAtomW
GetVersion
RaiseException
TlsGetValue
CloseHandle
GetTickCount
RtlUnwind
HeapFree
TlsAlloc
GetVersionExA
GetCurrentThread
GetModuleFileNameA
GlobalMemoryStatus
GetProcessHeap
TlsFree
TlsSetValue
GetCurrentProcess
EnumResourceNamesA
GetComputerNameA
HeapAlloc
SetLastError
GetStdHandle
GetStartupInfoA
SetUnhandledExceptionFilter
SetHandleCount
GetCommandLineA
OutputDebugStringW
GetSystemTimeAsFileTime
GetDiskFreeSpaceA
GetFileType
GetLocalTime
TerminateProcess
GetModuleHandleW
InterlockedExchange
msvcrt
?terminate@@YAXXZ
_XcptFilter
_initterm
_amsg_exit
exit
__setusermatherr
_exit
__set_app_type
_cexit
__p__fmode
_acmdln
memset
_ismbblead
__p__commode
_vsnprintf
_vsnwprintf
__getmainargs
_controlfp
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
Sections
.text Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ