Static task
static1
Behavioral task
behavioral1
Sample
c6423929145b984bab72cba6530f820b7edcce24034af00ed778a01f53bd091d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c6423929145b984bab72cba6530f820b7edcce24034af00ed778a01f53bd091d.exe
Resource
win10v2004-20220812-en
General
-
Target
c6423929145b984bab72cba6530f820b7edcce24034af00ed778a01f53bd091d
-
Size
219KB
-
MD5
749637bbfb0e1020dcab23a89963fdb0
-
SHA1
981005318868a5df1cee17fa8752e90bcb05e5c4
-
SHA256
c6423929145b984bab72cba6530f820b7edcce24034af00ed778a01f53bd091d
-
SHA512
fbfe5dc3478b1fceee6fc898b7c12ae8645ff0d6c7cc32052cb8e8c552f3efee74d23dbbc369fa28da3d931a15292fb717b564ea8070a934498fce70560991b5
-
SSDEEP
6144:qoeKOcfwjNJ5WwULEsUOXVURTruzn3h6zHl:NekfyFZSlyi3h6zF
Malware Config
Signatures
Files
-
c6423929145b984bab72cba6530f820b7edcce24034af00ed778a01f53bd091d.exe windows x86
a3a257e5cb1bf88bd8baa6fca479c8d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
ws2_32
WSAStartup
Sections
.text Size: 70KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ADATA Size: 27KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE