Static task
static1
Behavioral task
behavioral1
Sample
b6a63e91e760be813e494ffb375f2d63ce5c614240569674e323552e87603abd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6a63e91e760be813e494ffb375f2d63ce5c614240569674e323552e87603abd.exe
Resource
win10v2004-20220812-en
General
-
Target
b6a63e91e760be813e494ffb375f2d63ce5c614240569674e323552e87603abd
-
Size
132KB
-
MD5
ebe2862c3448f25b9b735d4aa7cf5bd9
-
SHA1
f72ec10133463867a3303b5daac18908dec29d83
-
SHA256
b6a63e91e760be813e494ffb375f2d63ce5c614240569674e323552e87603abd
-
SHA512
057f6ec27c3c7d7bc3182fe0e2bdc546fdad99896a1d1acb5a812ec4ce16f381a0c795103899b5c7cee9ebd0348307c7691e87e6beabae2124fbf945034c59b4
-
SSDEEP
3072:N+Uht4BbX84qCOihoCFAa68sEA7qIU6apY1K:Iy4BbX8eO0+a6MAWIpBK
Malware Config
Signatures
Files
-
b6a63e91e760be813e494ffb375f2d63ce5c614240569674e323552e87603abd.exe windows x86
377b332a34e6abfb3970357e964d2b5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_initterm
__set_app_type
_controlfp
__p__fmode
_exit
exit
_adjust_fdiv
__getmainargs
__p__commode
memcpy
__setusermatherr
_except_handler3
_XcptFilter
_acmdln
kernel32
GetSystemTimeAsFileTime
VirtualProtect
ReadFile
FindResourceA
FindClose
HeapCreate
GetModuleHandleA
DeleteFileA
GetStartupInfoA
HeapAlloc
GetLastError
InterlockedDecrement
GetStringTypeA
lstrcatA
CreateEventA
GetStdHandle
LoadResource
GetProcessHeap
ExpandEnvironmentStringsA
user32
DialogBoxParamA
CharPrevExA
FindWindowA
CharLowerBuffA
AnimateWindow
AdjustWindowRect
CharNextA
GetWindowDC
ArrangeIconicWindows
GetActiveWindow
ChangeDisplaySettingsA
LoadMenuA
CharPrevA
AdjustWindowRectEx
CharNextExA
GetDC
CharLowerA
GetForegroundWindow
AppendMenuA
BeginPaint
CreateWindowExA
CallMsgFilterA
AnyPopup
CascadeWindows
CallNextHookEx
ChangeClipboardChain
GetMenu
ActivateKeyboardLayout
BringWindowToTop
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ