Static task
static1
Behavioral task
behavioral1
Sample
6871df9204f72a682c71f77fe12970929826ab632ba679e4ff6846213c0b863c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6871df9204f72a682c71f77fe12970929826ab632ba679e4ff6846213c0b863c.exe
Resource
win10v2004-20220812-en
General
-
Target
6871df9204f72a682c71f77fe12970929826ab632ba679e4ff6846213c0b863c
-
Size
29KB
-
MD5
413f017a2d3bdb3ff99dd7463fc9711d
-
SHA1
05c295a599841740880e0adc4080c981b5e0ddd6
-
SHA256
6871df9204f72a682c71f77fe12970929826ab632ba679e4ff6846213c0b863c
-
SHA512
6baf47ef5b861d7a5ce512f3e6540d2fa784c8f8836a4b911f33941a27b3bb7276c33cdf42ddefc06e4ca68755494bf979d7ddb61568b79f591873c72cfe57cd
-
SSDEEP
768:bppLa8Bv2XTIArYyMXU8fZbI30PHR58ffsp:NpLaBDIArYjzZNwsp
Malware Config
Signatures
Files
-
6871df9204f72a682c71f77fe12970929826ab632ba679e4ff6846213c0b863c.exe windows x86
3e3a0e1ea140021fd9e91e20bfb4eb4f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidCodePage
ConvertThreadToFiber
CreatePipe
SetCriticalSectionSpinCount
DuplicateHandle
OpenFile
CancelWaitableTimer
ExpungeConsoleCommandHistoryA
ReplaceFileA
HeapAlloc
LocalShrink
GetCommandLineA
GetEnvironmentStrings
GenerateConsoleCtrlEvent
GetProcessShutdownParameters
GlobalDeleteAtom
GetEnvironmentVariableA
GetProcessShutdownParameters
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
icode Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
idata Size: 21KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ