Static task
static1
Behavioral task
behavioral1
Sample
c6dfa102f30e835f62a6adf41e11b21472558b0353cfb05e1f8059a7b90a7ffa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6dfa102f30e835f62a6adf41e11b21472558b0353cfb05e1f8059a7b90a7ffa.exe
Resource
win10v2004-20220812-en
General
-
Target
c6dfa102f30e835f62a6adf41e11b21472558b0353cfb05e1f8059a7b90a7ffa
-
Size
196KB
-
MD5
ffa9fca4382b75526baacb3c8190fc8f
-
SHA1
5f81d8ebe350d01a72ba3b4a0b82ea3936f70b62
-
SHA256
c6dfa102f30e835f62a6adf41e11b21472558b0353cfb05e1f8059a7b90a7ffa
-
SHA512
b6c5410c26c671618cf46978e8817e4fd2baf8e5efd0163d5159bf693513b5c6df3b697d0c1918ba199555ec4c3d5003ab093cb8093282461eebfe0b3540093c
-
SSDEEP
3072:GVmHcLY0bOVV/S9AJJjWm/73gAZdujVvPdwiWoQmAPSL0RFR0Yu7J:g1bOVBdJh//73TEhPdXAPSGn0B
Malware Config
Signatures
Files
-
c6dfa102f30e835f62a6adf41e11b21472558b0353cfb05e1f8059a7b90a7ffa.exe windows x86
fe1e6c576acc1b15c6ff53296e69202d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
IsBadReadPtr
GetProcAddress
GetOEMCP
GetCommandLineW
ExitProcess
GetACP
VirtualAllocEx
GetModuleHandleA
LoadLibraryExA
GetModuleHandleW
IsBadHugeReadPtr
GetCommandLineA
Sections
.text Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ