Static task
static1
Behavioral task
behavioral1
Sample
6f35aa1f37bed061f5e9956dbd061ae7b0da969991016c934ffdf7b242c76355.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6f35aa1f37bed061f5e9956dbd061ae7b0da969991016c934ffdf7b242c76355.exe
Resource
win10v2004-20220812-en
General
-
Target
6f35aa1f37bed061f5e9956dbd061ae7b0da969991016c934ffdf7b242c76355
-
Size
771KB
-
MD5
003c976fe8008e09aff1c1301fed4e6b
-
SHA1
0706106f18d0bc3b6d67cc0eabb84ca9ffad6c70
-
SHA256
6f35aa1f37bed061f5e9956dbd061ae7b0da969991016c934ffdf7b242c76355
-
SHA512
b6a1cba5a728137926973121ca88258bb4e9e8dffe0d71a8f84003c948d85cc9577b3ca0bb670dac870bf632881dc861698740de09b915d283da9dff541c71c6
-
SSDEEP
24576:+ksVocaW5A5b3m+s2svwsIZLVPirg1wj2:+dAHxJJisX
Malware Config
Signatures
Files
-
6f35aa1f37bed061f5e9956dbd061ae7b0da969991016c934ffdf7b242c76355.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 660KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xiaozi Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yuxuan Size: 188B - Virtual size: 188B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE