Static task
static1
Behavioral task
behavioral1
Sample
6cc544c0914635a5948178ce96fe05ec8aa03865aa74d3059edd2b79e11059c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6cc544c0914635a5948178ce96fe05ec8aa03865aa74d3059edd2b79e11059c6.exe
Resource
win10v2004-20220901-en
General
-
Target
6cc544c0914635a5948178ce96fe05ec8aa03865aa74d3059edd2b79e11059c6
-
Size
153KB
-
MD5
1a644edb18a0ca9b9823bd2524bfef76
-
SHA1
0c05c0d5f898ee9d56d36c556538e0bec0a6c178
-
SHA256
6cc544c0914635a5948178ce96fe05ec8aa03865aa74d3059edd2b79e11059c6
-
SHA512
d7dd1c31d9c3a7e9ceba07c4bba42d1278fba85554f4eb1b8eb7955a69abcfd9a1e43aace27976627b3a7b7aa6d50461acc23135f52f2107e52bb44095ee6a22
-
SSDEEP
3072:/ypdnOfQtqV8NjilLZmQS9iPYIXAE0G0/tioj84:6HOB8h6t49iPYGfVWV84
Malware Config
Signatures
Files
-
6cc544c0914635a5948178ce96fe05ec8aa03865aa74d3059edd2b79e11059c6.exe windows x86
7eaeb8de82ab2c893d1195e30cc60321
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
DuplicateToken
Sections
.mlsvuz Size: 34KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hef Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pgp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vwn Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE