Static task
static1
Behavioral task
behavioral1
Sample
e6c2508c654f504b7c6dd77be6b7bdb258ccf6ea8107717c5764d3fd7daa87b2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e6c2508c654f504b7c6dd77be6b7bdb258ccf6ea8107717c5764d3fd7daa87b2.exe
Resource
win10v2004-20221111-en
General
-
Target
e6c2508c654f504b7c6dd77be6b7bdb258ccf6ea8107717c5764d3fd7daa87b2
-
Size
418KB
-
MD5
22482523de8761bc84f675f4c50d9a60
-
SHA1
ca54cd61d5d82998c669fc8dcb0a504cdcb8a6ba
-
SHA256
e6c2508c654f504b7c6dd77be6b7bdb258ccf6ea8107717c5764d3fd7daa87b2
-
SHA512
3336053d3584aa13395097cc6b4d69203a92ca2798048ebf6360ea780b17e783c59167aa2d5cae01c34141c6b4399088d96d142a69515203cb842d1bcbf7d8ca
-
SSDEEP
12288:wN/5Y9FOd5xWNChIzB0yUiQDTrT1IV+tHv49Rk:o2FOlRa6yU9TbtHy
Malware Config
Signatures
Files
-
e6c2508c654f504b7c6dd77be6b7bdb258ccf6ea8107717c5764d3fd7daa87b2.exe windows x86
ee7cca428a318a00c1facca937e68a62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexA
GetModuleHandleA
CloseHandle
GetDiskFreeSpaceA
GetExitCodeThread
GetPrivateProfileSectionW
CloseHandle
InterlockedExchange
lstrcmpW
GetPriorityClass
SetEnvironmentVariableW
GetFileAttributesA
CloseHandle
LoadLibraryExW
SetFilePointer
GetPrivateProfileIntW
HeapCreate
WaitForMultipleObjects
CreateEventA
GetPrivateProfileIntW
CreateDirectoryW
lstrcmpiA
GetDiskFreeSpaceA
certmgr
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 411KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE