Static task
static1
Behavioral task
behavioral1
Sample
6de1d74ee9fc81c418fa5b8a46e5964c1ee7cb119c647de0efbfb985c7db2873.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6de1d74ee9fc81c418fa5b8a46e5964c1ee7cb119c647de0efbfb985c7db2873.exe
Resource
win10v2004-20220812-en
General
-
Target
6de1d74ee9fc81c418fa5b8a46e5964c1ee7cb119c647de0efbfb985c7db2873
-
Size
194KB
-
MD5
6222204f3cac2dbd1588b1bd456eb7cc
-
SHA1
546705555197781f787450914ff53bd21c8f4b1d
-
SHA256
6de1d74ee9fc81c418fa5b8a46e5964c1ee7cb119c647de0efbfb985c7db2873
-
SHA512
e962f578a6143c6930bbf3d942f25e7705876ca8444e0a4c23aecca70e9b26030da9369dd7f6e8952ef0867e8eb6c431f175e5008fbc138c51695c9e87252635
-
SSDEEP
6144:KeQUdsDROnolDI07BJynr3l2HwUy25Br2:K/ZDMou97mm25BK
Malware Config
Signatures
Files
-
6de1d74ee9fc81c418fa5b8a46e5964c1ee7cb119c647de0efbfb985c7db2873.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
0 Size: 151KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE