Static task
static1
Behavioral task
behavioral1
Sample
6eb962b483958ac8618a96c624f50544374dc4556b389db9dbe7dc37bc0b4041.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6eb962b483958ac8618a96c624f50544374dc4556b389db9dbe7dc37bc0b4041.exe
Resource
win10v2004-20220812-en
General
-
Target
6eb962b483958ac8618a96c624f50544374dc4556b389db9dbe7dc37bc0b4041
-
Size
57KB
-
MD5
3bb7e93e90d4156b9fb1a94655de3310
-
SHA1
028862c042618555d9ac17703841c4c718e528bb
-
SHA256
6eb962b483958ac8618a96c624f50544374dc4556b389db9dbe7dc37bc0b4041
-
SHA512
ed6cfc643a43cadcf361e259724835516e2a111a820cea1df6ab0157b133cf9097b97c3927e3e769803141551530b3522205ca27fbd24427ee9061d55fab6dd2
-
SSDEEP
1536:cwF5YnNOsPGHqqOLjuVJWgOLlh1uNfZmL:9itGdrJWV1AfsL
Malware Config
Signatures
Files
-
6eb962b483958ac8618a96c624f50544374dc4556b389db9dbe7dc37bc0b4041.exe windows x86
3af3eabc24a8aeabb57fd851189b390e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mscoree
CorBindToRuntimeEx
user32
MessageBoxA
oleaut32
SafeArrayUnlock
Sections
.text Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE