Static task
static1
Behavioral task
behavioral1
Sample
6b130773057b5574343efdfa8ed2b0fb24e4b61bd4720cb079cc0e389a12de25.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6b130773057b5574343efdfa8ed2b0fb24e4b61bd4720cb079cc0e389a12de25.exe
Resource
win10v2004-20220812-en
General
-
Target
6b130773057b5574343efdfa8ed2b0fb24e4b61bd4720cb079cc0e389a12de25
-
Size
62KB
-
MD5
6b4d1e3d1a97c84562f2d451dfba470f
-
SHA1
68255cb5ab607efb33619ead7b6c3868440915b2
-
SHA256
6b130773057b5574343efdfa8ed2b0fb24e4b61bd4720cb079cc0e389a12de25
-
SHA512
9d9a1793f927369140a006108f330a1e6e8a2f54d7d302a4ac6fc97e3ebc8cb5df82cbe684dc30c841af9cb0a4500e1b51c6a5b3405aec781af6211c7a2b0530
-
SSDEEP
1536:qrMu4DFHsf7EqfhRtPGI6WJEEyUE6yJ0qB8NY0bHS:qN4hMDEwRoT4E50by
Malware Config
Signatures
Files
-
6b130773057b5574343efdfa8ed2b0fb24e4b61bd4720cb079cc0e389a12de25.exe windows x86
fcd3fddf4ff18dbd927cf2a9c7d1553a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalHandle
FillConsoleOutputCharacterA
GetPrivateProfileSectionA
ConvertThreadToFiber
GetTapePosition
Heap32First
lstrcpyW
InterlockedExchange
HeapFree
PrepareTape
ConnectNamedPipe
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE