Static task
static1
Behavioral task
behavioral1
Sample
6ecfc7d2fe0902786c03e6141f7f008c2a51b6c6a4e48384706fd3ca135e1259.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6ecfc7d2fe0902786c03e6141f7f008c2a51b6c6a4e48384706fd3ca135e1259.exe
Resource
win10v2004-20220812-en
General
-
Target
6ecfc7d2fe0902786c03e6141f7f008c2a51b6c6a4e48384706fd3ca135e1259
-
Size
116KB
-
MD5
2ab1ea31b8c0a5025657553ea150ee50
-
SHA1
c777b8b9b12cbaadc71bdaadc29283e083d17168
-
SHA256
6ecfc7d2fe0902786c03e6141f7f008c2a51b6c6a4e48384706fd3ca135e1259
-
SHA512
f9a6a4069724bf9568ebead3de5344a094188459a7208a7f3b861144c3d09325b0d5b79869929bd7f6cdbbfb0684c4566b92bad560304520a00e1b94dae019da
-
SSDEEP
3072:05Mb75VmF7lzM41AXKlfiWv2Pq+lzN3Nnp0QxQS:0yb75YdlzM41AXmfXvIhX5p0vS
Malware Config
Signatures
Files
-
6ecfc7d2fe0902786c03e6141f7f008c2a51b6c6a4e48384706fd3ca135e1259.exe windows x86
0b378616da7b765d0c57eed9a4fe9420
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnmapViewOfFile
VirtualAlloc
GlobalUnlock
FindNextFileW
GetModuleHandleA
VirtualProtect
GetSystemTime
GetDiskFreeSpaceW
SetFileTime
GetTickCount
GetLastError
ExpandEnvironmentStringsW
LeaveCriticalSection
GetEnvironmentVariableW
GetVersionExW
CloseHandle
lstrlenW
WideCharToMultiByte
GetFileAttributesW
CopyFileW
HeapFree
advapi32
RegSetValueExA
CryptHashData
CryptReleaseContext
CryptGetHashParam
RegEnumKeyExA
CryptDestroyHash
GetUserNameW
RegCreateKeyExA
CryptAcquireContextW
RegQueryValueExA
shlwapi
PathFileExistsW
wnsprintfW
wnsprintfA
SHDeleteKeyA
wvnsprintfA
PathCombineW
PathRemoveFileSpecW
PathFindFileNameW
user32
GetKeyState
PeekMessageA
GetDlgItem
ExitWindowsEx
GetDlgItemTextA
FindWindowExA
GetKeyboardState
GetClipboardData
SetProcessWindowStation
SetThreadDesktop
GetForegroundWindow
DrawIcon
DispatchMessageA
GetMessageA
GetCursorPos
GetIconInfo
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE