Static task
static1
Behavioral task
behavioral1
Sample
6b0037f8bf3c5a4af6ed504b6bc73fafa1914949db1d82133d785b3fa3b90673.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b0037f8bf3c5a4af6ed504b6bc73fafa1914949db1d82133d785b3fa3b90673.exe
Resource
win10v2004-20220812-en
General
-
Target
6b0037f8bf3c5a4af6ed504b6bc73fafa1914949db1d82133d785b3fa3b90673
-
Size
725KB
-
MD5
8216e32e4e73e497fab6ff34fb42c510
-
SHA1
139a8f7b5ae769047411591552b065b704ed586e
-
SHA256
6b0037f8bf3c5a4af6ed504b6bc73fafa1914949db1d82133d785b3fa3b90673
-
SHA512
1b6234fa1db3ef50da4c01e3e78b337ccb12b5d7e3b90385937f07207e9a8d5cd0ab657600d295b0b53d687653cd4c8aabe6921e79efb4b347a4ddbc7c896a71
-
SSDEEP
12288:9U+FEvBmQ6A6GxbmmENN5olAM7qqew/wQ+uCf35GRvuSEjIa2:9dSJ36A6qbmpy7qzpGRvuSEjIz
Malware Config
Signatures
Files
-
6b0037f8bf3c5a4af6ed504b6bc73fafa1914949db1d82133d785b3fa3b90673.exe windows x86
fcd711b887dbfb9ec878a597ec979165
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetTraceLoggerHandle
GetServiceKeyNameA
ole32
CoReactivateObject
kernel32
SwitchToFiber
ScrollConsoleScreenBufferW
GetCurrentThreadId
oleaut32
VarI1FromUI1
ntdll
RtlIpv4AddressToStringExW
user32
GetActiveWindow
Sections
.text Size: 716KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE