Static task
static1
Behavioral task
behavioral1
Sample
6283f146de9efc701fe73cb8e70dcfdf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6283f146de9efc701fe73cb8e70dcfdf.exe
Resource
win10v2004-20220812-en
General
-
Target
6283f146de9efc701fe73cb8e70dcfdf.exe
-
Size
229KB
-
MD5
6283f146de9efc701fe73cb8e70dcfdf
-
SHA1
54fa717982798b63c01b253d37bc3d3a71806a76
-
SHA256
f2f4ea45f2fc943f867edcff5f7395d9565d951310d74f050c2decbd0ef3a8e0
-
SHA512
0ad4c90c2f34e402e952a90eeeeb4b86e262d3472ecb20698eb3d1484b2a21d204ea9ac81c76a6075e3ee0f0572fd52d1aa92cbb83a7defb95ec4cf6a880c84a
-
SSDEEP
3072:jd9hv6kLh1Ph2mH2ERlxXLeoCsLamLd7k/rc+nMCCVNbV8KukZH8oCEfMRI:Rv6kLx2gRlhzbL5hArc+nUNOKukilEs
Malware Config
Signatures
Files
-
6283f146de9efc701fe73cb8e70dcfdf.exe.exe windows x86
b309ad8ff2f5d228c287d88e79a9bed8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleInputW
GetCPInfo
DeleteVolumeMountPointA
GetModuleHandleExW
MoveFileWithProgressA
GetConsoleAliasesA
GetNumberFormatA
GetConsoleTitleA
SetFileShortNameW
LoadLibraryW
FatalAppExitW
_hread
GetConsoleAliasExesLengthW
GetVersionExW
GetFileAttributesW
WriteConsoleW
GetBinaryTypeA
WritePrivateProfileSectionW
GetGeoInfoA
GetMailslotInfo
CreateActCtxA
FindNextVolumeMountPointW
SetTapePosition
InterlockedExchange
GetLastError
GetProcAddress
VirtualAlloc
OpenWaitableTimerA
GetProcessWorkingSetSize
InterlockedExchangeAdd
LocalAlloc
RemoveDirectoryW
GetDiskFreeSpaceA
OpenJobObjectW
GetModuleHandleA
HeapSetInformation
EraseTape
GetStringTypeW
GetCurrentProcessId
GetLocaleInfoA
GetStringTypeA
LCMapStringW
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
GetStartupInfoW
HeapAlloc
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
RaiseException
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
user32
SetCaretPos
GetKeyNameTextW
RealGetWindowClassA
CharUpperA
CopyAcceleratorTableA
LoadIconW
GetCursorInfo
CharUpperBuffA
LoadMenuW
CharLowerBuffA
ole32
ReadClassStg
CoUninitialize
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ