Static task
static1
Behavioral task
behavioral1
Sample
6fce34efefde83a1a59d5fedc768131f2e9e18d75a09c2d6e52bcad15583eb43.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6fce34efefde83a1a59d5fedc768131f2e9e18d75a09c2d6e52bcad15583eb43.exe
Resource
win10v2004-20220812-en
General
-
Target
6fce34efefde83a1a59d5fedc768131f2e9e18d75a09c2d6e52bcad15583eb43
-
Size
566KB
-
MD5
a01f300c52759a111515bd68442833d0
-
SHA1
1dba97553428c611c53a62aae247786e9a6cc6a4
-
SHA256
6fce34efefde83a1a59d5fedc768131f2e9e18d75a09c2d6e52bcad15583eb43
-
SHA512
c009281d47f921a392b0caac06892dad3b3fedcd3482ed86358d0491f5342605298ab48325ef4b0a4128bc5e95a1ac46818a8a04d73bb40d3660743112335f74
-
SSDEEP
12288:uzvAquvIlhkweD5NxIALRVj+epB042j8XAl5a43OsXlooDPyfVzvAquvI:uzvAZOhJyhzBnTAnaSOsVooDKzvAZ
Malware Config
Signatures
Files
-
6fce34efefde83a1a59d5fedc768131f2e9e18d75a09c2d6e52bcad15583eb43.exe windows x86
53e92335e74fd01f0d86758a87341ec2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteW
iphlpapi
GetAdaptersInfo
ws2_32
gethostbyaddr
wtsapi32
WTSRegisterSessionNotification
Sections
.SRC Size: - Virtual size: 1.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SRC Size: 527KB - Virtual size: 528KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE