Static task
static1
Behavioral task
behavioral1
Sample
6e332b1505f7e20384d3f95f113d55017aed32c4f0619f1ee35ac82a9db89ee1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6e332b1505f7e20384d3f95f113d55017aed32c4f0619f1ee35ac82a9db89ee1.exe
Resource
win10v2004-20220812-en
General
-
Target
6e332b1505f7e20384d3f95f113d55017aed32c4f0619f1ee35ac82a9db89ee1
-
Size
765KB
-
MD5
842cc32d58df6168e53e27f99222be19
-
SHA1
fbe3ffda2fe9acbdfa9a5dc6336df1efd13cb124
-
SHA256
6e332b1505f7e20384d3f95f113d55017aed32c4f0619f1ee35ac82a9db89ee1
-
SHA512
1f4004ba18159489ad4c9c586e7dce16029844e86dfae5d1be964560faf4969cb305139847bfbb23988acc608d33d5ce6bba1054cb456a71b1f1a72d46df46c9
-
SSDEEP
12288:4t0ufelg92duk3npXPRtGd7j0tgkoBJqZnI9tsfi6AU/yUoF+l/PBXF7n:Vufe9dRpfIX0tgkownImeU/yUE+l/PBl
Malware Config
Signatures
Files
-
6e332b1505f7e20384d3f95f113d55017aed32c4f0619f1ee35ac82a9db89ee1.exe windows x86
613bc8dd3a2a7acaace062ab18b38640
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
lstrcpy
VirtualProtect
ExitProcess
comctl32
InitCommonControls
Sections
Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��~j@ Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������ Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������ Size: - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������ � Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
������� Size: 664KB - Virtual size: 662KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�o�n� Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tnhfewm Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE