Static task
static1
Behavioral task
behavioral1
Sample
6baf4f3cd8b80fbf3d4f1931b9716a5becd9ac9aba12d038be6aa58f327a9f84.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6baf4f3cd8b80fbf3d4f1931b9716a5becd9ac9aba12d038be6aa58f327a9f84.exe
Resource
win10v2004-20220901-en
General
-
Target
6baf4f3cd8b80fbf3d4f1931b9716a5becd9ac9aba12d038be6aa58f327a9f84
-
Size
71KB
-
MD5
0e6514bb66d3d21d3fc19fdaf1312c16
-
SHA1
5fddb10a0300057cb638648ad1d7af1f4f8fdaac
-
SHA256
6baf4f3cd8b80fbf3d4f1931b9716a5becd9ac9aba12d038be6aa58f327a9f84
-
SHA512
fdcd6b07ca7ba579a044496624b5b742c420a065084fb55a7c4ff8da5fe3abf8340ab8e12f7c34504cdbf59526a0f0408568f6140b2c2391f6943c0b65c21089
-
SSDEEP
1536:V4YWPLyatHC6vInAe0IQo6hYf1zwQVgvXg:VFWGaFRvIAe0IQK1zwLvX
Malware Config
Signatures
Files
-
6baf4f3cd8b80fbf3d4f1931b9716a5becd9ac9aba12d038be6aa58f327a9f84.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE