Static task
static1
Behavioral task
behavioral1
Sample
6843124cbc4cd1506431f9787599efbcab71ddbf3a47c0da5540b98c9f7e5497.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6843124cbc4cd1506431f9787599efbcab71ddbf3a47c0da5540b98c9f7e5497.exe
Resource
win10v2004-20220812-en
General
-
Target
6843124cbc4cd1506431f9787599efbcab71ddbf3a47c0da5540b98c9f7e5497
-
Size
123KB
-
MD5
630361d42e8c72ff23af10568a02372a
-
SHA1
f41ed8b0f138d4cc37e6051ea44496fd0f5e23e7
-
SHA256
6843124cbc4cd1506431f9787599efbcab71ddbf3a47c0da5540b98c9f7e5497
-
SHA512
06c7931f25576c5aa8f58cec605a6ee7841d95d9c0eac87873573eb4537b1a0e5cda48404a1082e7c7eb025c43b99243bfbd8c36a7c7d2b50a0cb1fc96374b30
-
SSDEEP
3072:hUBbC/PjhStIjm3qSuG7cigCc2dJPygz2:hmCAIjLYfc2dJqgq
Malware Config
Signatures
Files
-
6843124cbc4cd1506431f9787599efbcab71ddbf3a47c0da5540b98c9f7e5497.exe windows x86
46b0675c1fd7681c7b19a1c83d5aff83
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
user32
wsprintfA
MessageBoxA
Sections
.data Size: 114KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ