Static task
static1
Behavioral task
behavioral1
Sample
6442f978e56c51bb4413323356dfa220f1a08a4772ed9e9f312b8e7200cbe5e5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6442f978e56c51bb4413323356dfa220f1a08a4772ed9e9f312b8e7200cbe5e5.exe
Resource
win10v2004-20221111-en
General
-
Target
6442f978e56c51bb4413323356dfa220f1a08a4772ed9e9f312b8e7200cbe5e5
-
Size
307KB
-
MD5
e504d4f50949bcd865dfcc8579561e14
-
SHA1
cc6bb5141af519e56b6160214dd234909977d1a3
-
SHA256
6442f978e56c51bb4413323356dfa220f1a08a4772ed9e9f312b8e7200cbe5e5
-
SHA512
8a84d123933c6ee55c7273adc663169792b60af8d5d925ebbdf69282e0b9c23e98bcb9dc87dfb51d6d50970fff2fca205a70a79bc7fdcff94491106104efc28a
-
SSDEEP
6144:tpRVH2oDPnPsHhCHDrL0mvOL57pdbLe2HsyUEdhavUD7K5uucd:tp/H1PnP//p4pdbLeMphavQmxcd
Malware Config
Signatures
Files
-
6442f978e56c51bb4413323356dfa220f1a08a4772ed9e9f312b8e7200cbe5e5.exe windows x86
905be744947c4990892503f0eaec2409
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
SetFileTime
IsBadWritePtr
lstrcpyA
GetExitCodeProcess
LeaveCriticalSection
GetLastError
SetConsoleTitleA
CreateEventA
HeapSize
GetFileSize
ReadFile
GetStartupInfoW
SetFileTime
HeapCreate
SetFileTime
GetStringTypeA
CloseHandle
lstrcatA
LoadLibraryA
InterlockedExchange
mstscax
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
shell32
SHGetSettings
ShellAboutA
SHFree
DragQueryFileA
DllUnregisterServer
DuplicateIcon
StrChrA
ExtractIconA
SHGetMalloc
SHGetDiskFreeSpaceA
ShellMessageBoxW
DragFinish
DragAcceptFiles
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ