Static task
static1
Behavioral task
behavioral1
Sample
Pm6hl90d.bin.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Pm6hl90d.bin.exe
Resource
win10v2004-20230220-en
General
-
Target
Pm6hl90d.bin.exe
-
Size
4.3MB
-
MD5
202c012aedd7440f4eadf3a7e3a83ad0
-
SHA1
c238761b379a75fa268125561bbae41e72caca63
-
SHA256
9d6b0c042be84356ff1384b166b97fa69d71d863e37d2a01ff24e1c500d90485
-
SHA512
efd8daad5dcdd9ebadf475e9a9c861798a917128290463db8f70cc31210a4a09d279dfcde470d602cfde228cac7789725822a18690420ce280d4465d7500638c
-
SSDEEP
98304:bor74K/vTyBVi61uBst1fbVQr0zutHsSLUNbsBp:u/vTKQwuBgNbVXuBUl
Malware Config
Signatures
Files
-
Pm6hl90d.bin.exe.exe windows x86
96d5fa481b9a65c7095d2725e96f5ddd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetClipboardData
advapi32
RegSetValueExA
Sections
.text Size: - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
#%YRGT$F Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
#%YRGT$F Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
#%YRGT$F Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 283KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ