Static task
static1
Behavioral task
behavioral1
Sample
6e691decf867785b3514237f7e8ec10fba707e64fc783743f7b16306e9cba047.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e691decf867785b3514237f7e8ec10fba707e64fc783743f7b16306e9cba047.exe
Resource
win10v2004-20220812-en
General
-
Target
6e691decf867785b3514237f7e8ec10fba707e64fc783743f7b16306e9cba047
-
Size
827KB
-
MD5
e28208b17f0b5f896d478f10271b5871
-
SHA1
52c5e0e1db6d5976c3d34f5155c00aa9b6905fa1
-
SHA256
6e691decf867785b3514237f7e8ec10fba707e64fc783743f7b16306e9cba047
-
SHA512
f82c36deb16ad6b9826e3e187cd49ed942cb25d12c89fb1c2e544d82d896ae750d0f765aaffb725fc4c854756ba07c8a3dcab2d5f0f66ee158ccd47d9b8e4731
-
SSDEEP
24576:SJ4D/4vCJTRu+diWLVPV3OBI8IQqruSRo6:iK7VPlOBI0re
Malware Config
Signatures
Files
-
6e691decf867785b3514237f7e8ec10fba707e64fc783743f7b16306e9cba047.exe windows x86
0145290f52ddf4d3d19759f19733196f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetEnvironmentVariableW
HeapFree
GetPrivateProfileIntW
GetCurrentDirectoryA
lstrcmpW
VirtualProtect
CompareStringW
lstrcatA
GetModuleHandleA
WriteFile
GetStringTypeA
ReadConsoleW
GetProcessHeap
GetTimeFormatA
GetLastError
CreateMailslotW
GetShortPathNameA
GetDiskFreeSpaceW
GetVolumeInformationA
dsdmo
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
DllRegisterServer
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 1024B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qdata Size: 804KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ