Static task
static1
Behavioral task
behavioral1
Sample
6dc5a6632d2434c1922e69b79b96ca22a819ba61c1a65268c5dac826b9ee0b44.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6dc5a6632d2434c1922e69b79b96ca22a819ba61c1a65268c5dac826b9ee0b44.exe
Resource
win10v2004-20220812-en
General
-
Target
6dc5a6632d2434c1922e69b79b96ca22a819ba61c1a65268c5dac826b9ee0b44
-
Size
115KB
-
MD5
06894404f4c7d0068df0e5ba0ac43950
-
SHA1
7d572cec49b88061628237dc24c9326c581a2091
-
SHA256
6dc5a6632d2434c1922e69b79b96ca22a819ba61c1a65268c5dac826b9ee0b44
-
SHA512
fccfd606f2f7beaf70a0c0759682f87ed46f490df1b392d1b0e83ccd0bd4e2f136a5d125ab33229ebc44011a461df476425302cf567929476c828fa45a658610
-
SSDEEP
1536:xz28rUzRvqIDopoV+KSLpOOaRhdsRM6QESM/GGa:N0zcIE7vL4OajD6QKBa
Malware Config
Signatures
Files
-
6dc5a6632d2434c1922e69b79b96ca22a819ba61c1a65268c5dac826b9ee0b44.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 38KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE