Static task
static1
Behavioral task
behavioral1
Sample
6ec4e282751fe54d7f4f838f639bd3d7e3ba52c77995ad14428c2b74c1215acf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6ec4e282751fe54d7f4f838f639bd3d7e3ba52c77995ad14428c2b74c1215acf.exe
Resource
win10v2004-20220812-en
General
-
Target
6ec4e282751fe54d7f4f838f639bd3d7e3ba52c77995ad14428c2b74c1215acf
-
Size
19KB
-
MD5
4214d4a6953eb24b82dd256064830384
-
SHA1
5cc37b4ea50b92cdac536f94f06e3f77c2ec217d
-
SHA256
6ec4e282751fe54d7f4f838f639bd3d7e3ba52c77995ad14428c2b74c1215acf
-
SHA512
1b473f6736aeb9911014f3ab5af1dd8de19d3e194035a02ac5be593e32978491d65cdd89d4103b18336f779471b56d90df835d8804534e2185d3da57a3bc7c21
-
SSDEEP
384:1GjSyiu52ufiIY7rmtbsIOlfEQhl242eWiraX/9CV5REwX6ehTFx4w:1GjSydo3rmRpKf32KWiOX/9CKwX6eew
Malware Config
Signatures
Files
-
6ec4e282751fe54d7f4f838f639bd3d7e3ba52c77995ad14428c2b74c1215acf.exe windows x86
2b8522e11e1cd9a4b7759b7153195619
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
PostMessageA
advapi32
RegOpenKeyExA
wininet
InternetOpenA
urlmon
URLDownloadToFileA
shell32
ShellExecuteA
gdi32
StretchBlt
ole32
OleInitialize
oleaut32
SysFreeString
Sections
.text Size: 13KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE