Static task
static1
Behavioral task
behavioral1
Sample
06ffa1ef39af6348d29d68af6d69c16e35215c8bd245388663946a9c6e41305d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06ffa1ef39af6348d29d68af6d69c16e35215c8bd245388663946a9c6e41305d.exe
Resource
win10v2004-20220901-en
General
-
Target
06ffa1ef39af6348d29d68af6d69c16e35215c8bd245388663946a9c6e41305d
-
Size
83KB
-
MD5
5b088ac6fc02f4c6e6b9dd9243e08636
-
SHA1
ec68163e981e3967ed5c39be3b94a3ff3821ccbf
-
SHA256
06ffa1ef39af6348d29d68af6d69c16e35215c8bd245388663946a9c6e41305d
-
SHA512
39c4bf915bb2d627464f3aaed76b2ad12df955a1248168e935f6087e7c7f4f91d8bf666ad3f70b5d0f1f14798d8eb18b7c7e83702781554e9ffae947a5139817
-
SSDEEP
1536:+yCj8u2LQY9fiRnMmq0M3rCmaRhdsRJTG:+JjiLf9WM3rZajiTG
Malware Config
Signatures
Files
-
06ffa1ef39af6348d29d68af6d69c16e35215c8bd245388663946a9c6e41305d.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 38KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE