Static task
static1
Behavioral task
behavioral1
Sample
6bd22d5412bb938cacef9ca53caaa225dec4af9e581231a52f641ed8313a160f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6bd22d5412bb938cacef9ca53caaa225dec4af9e581231a52f641ed8313a160f.exe
Resource
win10v2004-20220812-en
General
-
Target
6bd22d5412bb938cacef9ca53caaa225dec4af9e581231a52f641ed8313a160f
-
Size
958KB
-
MD5
64ffa57d06dcda51bfc4402abe6ebacc
-
SHA1
5dc6ab2033c3da381bcff613d358742ea12d6d4b
-
SHA256
6bd22d5412bb938cacef9ca53caaa225dec4af9e581231a52f641ed8313a160f
-
SHA512
bc18b02cc7ce4dd0965ac7ec53ef8e73a4ced32948e2f641149ce1eeebffb923488a702e7c5a557d67a05711fa680f220d2e423470362af8cfdbf0779bb2fe1e
-
SSDEEP
1536:VT7kWlngkYFKynXvAh1MFOMLwOueYdqXhVBZXcMik421dNSkWNVYM3O3:VMQgk6Kyn/wMFOMLN9AQdjWzT+
Malware Config
Signatures
Files
-
6bd22d5412bb938cacef9ca53caaa225dec4af9e581231a52f641ed8313a160f.exe windows x86
8eb84258b0be85e547aa3252c67fc33e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
FindResourceW
GetTickCount
GetVolumeInformationA
GetFileAttributesA
GetSystemDirectoryA
lstrcatA
GetLastError
GetProcAddress
GetModuleHandleA
GetVersion
GetCurrentProcessId
lstrcpyA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 498B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ