Static task
static1
Behavioral task
behavioral1
Sample
7e6b8c06f4ed793576971c85e4ba4ac1fff70fab60f57a8d77d4da8c85c11a03.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7e6b8c06f4ed793576971c85e4ba4ac1fff70fab60f57a8d77d4da8c85c11a03.exe
Resource
win10v2004-20220812-en
General
-
Target
7e6b8c06f4ed793576971c85e4ba4ac1fff70fab60f57a8d77d4da8c85c11a03
-
Size
92KB
-
MD5
832031ec5a8a91bf8a2e56396139a6f5
-
SHA1
30365852d06b491e3e44451982682e999017b1bf
-
SHA256
7e6b8c06f4ed793576971c85e4ba4ac1fff70fab60f57a8d77d4da8c85c11a03
-
SHA512
1b23428f31ec10b49d9e4a977c9aeceb5ea6dcefb58568399109f956005b876845e7a9ac6919a7f0ae90414db4cfd46e63ac6991cf99e85fc1698ecec396ffee
-
SSDEEP
1536:C+C7PaYolL9h1hmgBfs734JXB8hmoMkSgtcQnG+bfMSkVPGEgqZ83YacIyP/69Q9:0bgMgGhlMkxtcQnJDZFqKYBbWq0GQP0j
Malware Config
Signatures
Files
-
7e6b8c06f4ed793576971c85e4ba4ac1fff70fab60f57a8d77d4da8c85c11a03.exe windows x86
6340acc76e8edb3e69ea6ed8a06f3b3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
PrivMoveFileIdentityW
GetNativeSystemInfo
SetFileTime
SwitchToFiber
CreateProcessInternalW
SetTermsrvAppInstallMode
FillConsoleOutputCharacterA
lstrcmpi
GetBinaryTypeW
IsDBCSLeadByte
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE