Static task
static1
Behavioral task
behavioral1
Sample
6ab20027e79cada49e7f4e028f1d4e5e2b13e1adff4d31f64f4bfc6dc9e8516a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6ab20027e79cada49e7f4e028f1d4e5e2b13e1adff4d31f64f4bfc6dc9e8516a.exe
Resource
win10v2004-20220812-en
General
-
Target
6ab20027e79cada49e7f4e028f1d4e5e2b13e1adff4d31f64f4bfc6dc9e8516a
-
Size
448KB
-
MD5
0a3467519db1838d04596e299943dc30
-
SHA1
16215ba86c5315a96a62840f4c6ece3000efb5a6
-
SHA256
6ab20027e79cada49e7f4e028f1d4e5e2b13e1adff4d31f64f4bfc6dc9e8516a
-
SHA512
f3f07af61dd50b2e9d9edb2affcabdf647fee8fde26b5744ccc7b8e5824ca67570a2a82f245a619131d9c79f1e5bfe1866c7993165d8faae2050922a0d75a664
-
SSDEEP
12288:88i/iik9qoOXvkBeCourylWuRjhTobgyLL98D9mJ+:8tAJOXvkBaaTuRjhTocPt
Malware Config
Signatures
Files
-
6ab20027e79cada49e7f4e028f1d4e5e2b13e1adff4d31f64f4bfc6dc9e8516a.exe windows x86
e350488468b3165b82226f759bb14309
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetNewLinkInfoA
ws2_32
getservbyname
ntdll
ZwCreateJobObject
ole32
CoQueryClientBlanket
user32
GetInputDesktop
GetMessageExtraInfo
kernel32
GetConsoleWindow
Sections
.text Size: 441KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 207B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE