Static task
static1
Behavioral task
behavioral1
Sample
b6680d3d008ddb610897b989331548a34dfd46b6cfed81f79bbe22ac855472f1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b6680d3d008ddb610897b989331548a34dfd46b6cfed81f79bbe22ac855472f1.exe
Resource
win10v2004-20220901-en
General
-
Target
b6680d3d008ddb610897b989331548a34dfd46b6cfed81f79bbe22ac855472f1
-
Size
320KB
-
MD5
2dd7ecbd05869c73dbd6a0f373163760
-
SHA1
5b08a850ef91034a46a2a3e5a17e58571cc7aaaa
-
SHA256
b6680d3d008ddb610897b989331548a34dfd46b6cfed81f79bbe22ac855472f1
-
SHA512
49b10cf4078baa4055eab70c4ede6cf2afe213a71ab13cc4ec2f843dd3f3f42db31580e1627a5b5314506242a8ac77426b1d5e24826485bacc6945b3c5a6e579
-
SSDEEP
6144:4SIsXagvFm48Q6uH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:4Sa2N8nU2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
b6680d3d008ddb610897b989331548a34dfd46b6cfed81f79bbe22ac855472f1.exe windows x86
1eaa5e1613ab604e82e78dac1d6f38e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BaseQueryModuleData
ExpungeConsoleCommandHistoryA
CreateToolhelp32Snapshot
UnlockFile
LocalFree
WritePrivateProfileStructA
NlsResetProcessLocale
SetVolumeMountPointW
GetDefaultCommConfigW
GetShortPathNameW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE