Static task
static1
Behavioral task
behavioral1
Sample
6f270dfb7ee7af893bb929f4b41f4a5426cddde47d6e146103242608bb9081c1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6f270dfb7ee7af893bb929f4b41f4a5426cddde47d6e146103242608bb9081c1.exe
Resource
win10v2004-20220812-en
General
-
Target
6f270dfb7ee7af893bb929f4b41f4a5426cddde47d6e146103242608bb9081c1
-
Size
726KB
-
MD5
04351af2a551f4f14beb8d850fd915c0
-
SHA1
a93ba76a363ccf8a68b745571d8938fd47c3ac5d
-
SHA256
6f270dfb7ee7af893bb929f4b41f4a5426cddde47d6e146103242608bb9081c1
-
SHA512
267f54d286de1dc58bff60ae071aaeb82e9345d70630765347ac5559740ac78d3e13e195ec923e47c6388828bfd6a093c99fb771bc5a258452ab4a82b84f6187
-
SSDEEP
12288:uj48qMjoA5SXeGLYOpfzopwyjsz3sp1c/b9weqKhovbP+wdMkqY:ujLqMkAxg150sbsg/b9wnKhAP+oL
Malware Config
Signatures
Files
-
6f270dfb7ee7af893bb929f4b41f4a5426cddde47d6e146103242608bb9081c1.exe windows x86
ff36c80a61d9cc95d9c0a02a5ca2e690
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlDnsHostNameToComputerName
ZwSetSystemPowerState
RtlImageRvaToSection
ZwReleaseSemaphore
RtlWriteMemoryStream
RtlGetCurrentDirectory_U
ZwQueryEaFile
oleaut32
VARIANT_UserSize
kernel32
GetVersion
GetSystemDefaultUILanguage
user32
GetDoubleClickTime
Sections
.text Size: 717KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE