06f013bc9a706b0d39eb3ca9063e36a20737ead5c44e2d523a4bebada9f2ad9d | Triage

Submit
Reports

Overview

overview

Static

static

06f013bc9a...9d.exe

windows7-x64

06f013bc9a...9d.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

06f013bc9a706b0d39eb3ca9063e36a20737ead5c44e2d523a4bebada9f2ad9d.exe

Resource

win7-20220901-en

ardamax discovery keylogger persistence stealer upx

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

06f013bc9a706b0d39eb3ca9063e36a20737ead5c44e2d523a4bebada9f2ad9d.exe

Resource

win10v2004-20220812-en

ardamax discovery keylogger persistence stealer upx

windows10-2004-x64

15 signatures

150 seconds

General

Target

06f013bc9a706b0d39eb3ca9063e36a20737ead5c44e2d523a4bebada9f2ad9d
Size

792KB
MD5

675127ceeaca491102a7df908d806c85
SHA1

61ae8400392857fc591e0dbd870dd71b9cee7ae1
SHA256

06f013bc9a706b0d39eb3ca9063e36a20737ead5c44e2d523a4bebada9f2ad9d
SHA512

09f34ed6fbcc5b0ac465c903457063bd3f81b4a971e365c8bd4004b32c6e2c9e3a72cb70f48b0ff628a8874ed5d22136c08acfa8692f3bfbdd6513550b81d179
SSDEEP

12288:rh30594J6MdriP8XUxfrCg1z/Z/TzjtJqjmBPPYMwdZozaibEkx26+9QtMIs4V2o:VEcLmDxvt/KmUdZEai/xf+9Q9SqZ

Score

N/A

Malware Config

Signatures

Files

06f013bc9a706b0d39eb3ca9063e36a20737ead5c44e2d523a4bebada9f2ad9d
.exe windows x86

86632da30434ccfc050190a47fb559c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
exit
memcpy
memset
_itow
??2@YAPAXI@Z
_wcsdup
??3@YAXPAX@Z
free
__p__commode

kernel32

GetModuleHandleA
GetTempPathW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
SetFilePointer
CloseHandle
GetTempFileNameW
FreeLibrary
DeleteFileW
WriteFile
ReadFile
LoadLibraryW
GetProcAddress
GetStartupInfoA

user32

MessageBoxW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy