Static task
static1
Behavioral task
behavioral1
Sample
6f3e4a785b6b0cc208570dfac37eafd39dd60ad1469131682ba781d8d3a48b99.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6f3e4a785b6b0cc208570dfac37eafd39dd60ad1469131682ba781d8d3a48b99.exe
Resource
win10v2004-20220812-en
General
-
Target
6f3e4a785b6b0cc208570dfac37eafd39dd60ad1469131682ba781d8d3a48b99
-
Size
900KB
-
MD5
6fc2f75014178c8fe1d54160c36299d0
-
SHA1
58dd0d84889e9feb44cc30e5b8cc83a6824f1994
-
SHA256
6f3e4a785b6b0cc208570dfac37eafd39dd60ad1469131682ba781d8d3a48b99
-
SHA512
ca0d094cebb3231236472cec8057c87224b1689192a75bfff59d4f923f8cf10b45f9b004e86ad547b1019af79d2de112387942142689f93d6ab33afdb4729ec4
-
SSDEEP
12288:imetvYMO/ZN8NTdV9q4XgCS834qoNp7lVf2+OrFlWrphOYJYokI:imetvY6NrQKC3792+OhlWd
Malware Config
Signatures
Files
-
6f3e4a785b6b0cc208570dfac37eafd39dd60ad1469131682ba781d8d3a48b99.exe windows x86
fe2e2ef25cef0bbe268f37a9f02e8504
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strcmp
memmove
memcpy
_CIlog
malloc
free
fseek
ftell
fread
fclose
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
HeapFree
LoadLibraryA
HeapAlloc
HeapReAlloc
CreateFileA
ReadFile
Sections
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ