Static task
static1
Behavioral task
behavioral1
Sample
b6d9ffac6a48a3cefec76908957889579011a0f3fa8e955f9d3af54d6a43da5d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6d9ffac6a48a3cefec76908957889579011a0f3fa8e955f9d3af54d6a43da5d.exe
Resource
win10v2004-20220901-en
General
-
Target
b6d9ffac6a48a3cefec76908957889579011a0f3fa8e955f9d3af54d6a43da5d
-
Size
251KB
-
MD5
840380d84bb4f4733ea37e4fe0613af0
-
SHA1
0ca28e6ceb001ba5245a27ba7ba0b9fb5a3b6a0b
-
SHA256
b6d9ffac6a48a3cefec76908957889579011a0f3fa8e955f9d3af54d6a43da5d
-
SHA512
5edd2f1a413eaeb817bb9d4f137145c6573eaacdbcfc2a5f0b95bc3a3d88ce72f39ded8496809dd337d3023b3e88fd510e8c4d2c3e5aae03dfcece395ff9b70e
-
SSDEEP
1536:Ev+1ajg59V5VsPW7AvosJe8k8hkKGCGL2+AbyTWOGIaNWUbCE1HMwnVdfevQ:A+4gru+7Avo/usFq+UCW1IaOEiwnVQQ
Malware Config
Signatures
Files
-
b6d9ffac6a48a3cefec76908957889579011a0f3fa8e955f9d3af54d6a43da5d.exe windows x86
397e2ff1e3a568536a70229ce9cfa499
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
VirtualAlloc
GetWindowsDirectoryA
GetStartupInfoA
GlobalAlloc
user32
LoadIconA
GetSysColor
LoadCursorA
advapi32
RegOpenKeyA
msvcrt
memcpy
Sections
.text Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text2 Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ