Static task
static1
Behavioral task
behavioral1
Sample
6e4699cbd5380659c3b9a5104b69680a5fc521c059f4197979404915f811cf4f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e4699cbd5380659c3b9a5104b69680a5fc521c059f4197979404915f811cf4f.exe
Resource
win10v2004-20220812-en
General
-
Target
6e4699cbd5380659c3b9a5104b69680a5fc521c059f4197979404915f811cf4f
-
Size
278KB
-
MD5
d158cdbe9a6a1e8b852ce0f02e9c3078
-
SHA1
020f4e752bcb565f9206b6fac954ee8a8223be73
-
SHA256
6e4699cbd5380659c3b9a5104b69680a5fc521c059f4197979404915f811cf4f
-
SHA512
2f9d1ccf70ad8ed56b8897122342885fbd5515ff9c056435729f9d2b459bff352c7c064fbffd1d5d8014e4d3c4dfe79fa22363216cd3d8bb63643897467b39e2
-
SSDEEP
6144:9ewWUBwgPAJb8WYjIpUNEDJtGveWVRcF/rlAd70mXagO/zwk5RpB:9ewWrV6IpIEtQmWV6e10+38zwk5Rp
Malware Config
Signatures
Files
-
6e4699cbd5380659c3b9a5104b69680a5fc521c059f4197979404915f811cf4f.exe windows x86
86eac19874351fe253aa6e88bd7c3d47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetFileAttributesA
GlobalLock
CloseHandle
WaitForMultipleObjects
lstrlenA
SetFileAttributesW
GetCommandLineA
SetLastError
HeapCreate
GetCurrentDirectoryW
GetDriveTypeA
GetModuleHandleA
GlobalSize
ExitThread
GetCommandLineW
IsBadReadPtr
GetFileType
GetEnvironmentVariableW
FindClose
MapViewOfFile
ReadFile
EnterCriticalSection
HeapFree
GetFileTime
uxtheme
GetWindowTheme
CloseThemeData
GetThemeEnumValue
DrawThemeBackground
OpenThemeData
GetThemeBool
GetThemeColor
IsThemeActive
GetThemeTextExtent
CloseThemeData
DrawThemeEdge
SetWindowTheme
GetThemeTextMetrics
dispex
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE