Static task
static1
Behavioral task
behavioral1
Sample
6f002881edec29ae718791618e7598e851a649350e725cbd0aec12ac254c151a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6f002881edec29ae718791618e7598e851a649350e725cbd0aec12ac254c151a.exe
Resource
win10v2004-20221111-en
General
-
Target
6f002881edec29ae718791618e7598e851a649350e725cbd0aec12ac254c151a
-
Size
76KB
-
MD5
00f9046f178823b5f5fc4133eb187f6f
-
SHA1
f1a02394797993c8c45ae8553770454632ab2500
-
SHA256
6f002881edec29ae718791618e7598e851a649350e725cbd0aec12ac254c151a
-
SHA512
a0d3609e4fb3655d07bc76e39b09d9ff8dfd6135fbd441ef5f2f74d4f301bb64d3665ae367a262417dc291fdf47d51e88e277bd72c3f1cec75580543416ab61f
-
SSDEEP
1536:jMfXMAsua4WGYSeo5Lj+V7H9MR7bCJ/Bzm+yXhu9ariMhdEB/tpJpH:jMfXMAsuTYrqLj+dH96+FvyX88rFh2Hp
Malware Config
Signatures
Files
-
6f002881edec29ae718791618e7598e851a649350e725cbd0aec12ac254c151a.exe windows x86
4b1d4ecc38c62677965c1403f44a5f48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileSize
lstrcatA
GetExitCodeProcess
lstrcpyA
InitializeCriticalSection
IsBadWritePtr
CloseHandle
ReadFile
FindResourceW
GetLastError
LoadLibraryA
GetStartupInfoW
SetFileTime
GetModuleHandleA
SetFileTime
FormatMessageW
CreatePipe
SetFileTime
HeapCreate
CreateMutexW
LeaveCriticalSection
mstscax
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
user32
DispatchMessageA
PostMessageA
IsDialogMessageA
GetWindowTextA
PeekMessageW
LoadCursorW
SetFocus
GetWindowRect
IsWindow
MessageBoxA
GetWindowLongW
wsprintfA
PostMessageW
clbcatq
SetSetupSave
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE