Static task
static1
Behavioral task
behavioral1
Sample
6dfb5918083dcd71681d8ecb42996375ea7113749797626e597748e45e2a68ba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6dfb5918083dcd71681d8ecb42996375ea7113749797626e597748e45e2a68ba.exe
Resource
win10v2004-20220812-en
General
-
Target
6dfb5918083dcd71681d8ecb42996375ea7113749797626e597748e45e2a68ba
-
Size
523KB
-
MD5
085fdddcd79b2b5576fd5e5e09163f68
-
SHA1
56f281ed911dba250a95cf05feb2ac9d6a073048
-
SHA256
6dfb5918083dcd71681d8ecb42996375ea7113749797626e597748e45e2a68ba
-
SHA512
64bcc2232997fde4f7d6aa3770fcb65dca078f314efb2c8f403cf97a770130aac0d85eaf177bf0988b8ed0fd4840f3dad84fac2704d9c473a071dcc5676af5f9
-
SSDEEP
6144:zTqmi3n9FYGGc69xQRZ81EZYNJg2+P9oYehMsw25DYPYjQB+pN/DYvmCItDE7pzP:/tiNwQ/8OCMpPorCGsazq75
Malware Config
Signatures
Files
-
6dfb5918083dcd71681d8ecb42996375ea7113749797626e597748e45e2a68ba.exe windows x86
14abcfb04e9fc02bbd3dcda121f946fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetModuleHandleA
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress
LoadLibraryA
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 823B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 822B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 746B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.vmp0 Size: 508KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE