Static task
static1
Behavioral task
behavioral1
Sample
b6d22d0c4102bc4dd6cd346910dda5c9d72c27d11c55538bbae2874996b87ef5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6d22d0c4102bc4dd6cd346910dda5c9d72c27d11c55538bbae2874996b87ef5.exe
Resource
win10v2004-20220812-en
General
-
Target
b6d22d0c4102bc4dd6cd346910dda5c9d72c27d11c55538bbae2874996b87ef5
-
Size
818KB
-
MD5
9ffff5b52089db15a0817da44666a66a
-
SHA1
6388ff711c2fc532390384b66bcd21a8887ff4ac
-
SHA256
b6d22d0c4102bc4dd6cd346910dda5c9d72c27d11c55538bbae2874996b87ef5
-
SHA512
653e5b878f70aa4e09771bf5df5e806aa8158354a95013c12f33eff4f53e22d163a8bc3a6fbef0bace14fa086917f703dee72ae63c1b469e3c3e4ed0c13fcea6
-
SSDEEP
24576:KuGbPsZ1H43TB1JV+zl9R8RYfnS0S5ktDVY8P1:+Ls743HH+B9yRYfS0Kkt68P1
Malware Config
Signatures
Files
-
b6d22d0c4102bc4dd6cd346910dda5c9d72c27d11c55538bbae2874996b87ef5.exe windows x86
0e6f2648a6761d134271b9b6dbd50a14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceW
Heap32First
VirtualFree
lstrcpynA
lstrcpynA
lstrcpynA
lstrcpynA
FindFirstVolumeA
SetThreadPriority
lstrcpynA
GetSystemTime
VirtualProtectEx
GetFileType
ReadConsoleA
lstrcpynA
lstrcatA
GetCurrentThreadId
GetDriveTypeA
lstrcpynA
GetCurrentDirectoryA
GetVolumeInformationA
OpenMutexW
lstrcpynA
lstrcpynA
lstrcmpW
GetModuleHandleA
WriteFile
lstrcpynA
GetPrivateProfileIntA
cmdial32
InetDialHandler
AutoDialFunc
RasCustomDialDlg
RasCustomDial
Sections
.text Size: 18KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 850B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ