Static task
static1
Behavioral task
behavioral1
Sample
67dcffb168a59f651f9bedd91035c94faff29a2183a80a6ad9f2a045da74451c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
67dcffb168a59f651f9bedd91035c94faff29a2183a80a6ad9f2a045da74451c.exe
Resource
win10v2004-20220812-en
General
-
Target
67dcffb168a59f651f9bedd91035c94faff29a2183a80a6ad9f2a045da74451c
-
Size
186KB
-
MD5
6f9c46dd058dfff86554b6f1a4efe03d
-
SHA1
680ba8671ee9361665a47f7e4bd177f4dc535caf
-
SHA256
67dcffb168a59f651f9bedd91035c94faff29a2183a80a6ad9f2a045da74451c
-
SHA512
d98f76878f1dab90330c9a0feeea4fe494f012e0c3b16c4d4feabc46f9fc8989e58fb6bd1ffef19fb7109b1b8051823efc4a758f265976a077aeaa0bd7daac0c
-
SSDEEP
3072:Z1Fk9cl4mFxsAxIIxu5gBI649zvemtxL5l4ehU/rH0UofpuvXbC:Z1EcOAxJs5gafWmtnru4Ua0vbC
Malware Config
Signatures
Files
-
67dcffb168a59f651f9bedd91035c94faff29a2183a80a6ad9f2a045da74451c.exe windows x86
a3a257e5cb1bf88bd8baa6fca479c8d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
ws2_32
WSAStartup
Sections
HJFDDERT Size: - Virtual size: 612KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HJFDDERT Size: 185KB - Virtual size: 188KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE