Static task
static1
Behavioral task
behavioral1
Sample
6b531b3610c346ef62b73e6d9639b3324c31d8dca7891dc5f7e5c12c9ec408f5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6b531b3610c346ef62b73e6d9639b3324c31d8dca7891dc5f7e5c12c9ec408f5.exe
Resource
win10v2004-20220812-en
General
-
Target
6b531b3610c346ef62b73e6d9639b3324c31d8dca7891dc5f7e5c12c9ec408f5
-
Size
132KB
-
MD5
07e4118c198da094a8e74d9c16db0b67
-
SHA1
bd506ca0e1eb487b4fc7096bd9fedc6111fddd69
-
SHA256
6b531b3610c346ef62b73e6d9639b3324c31d8dca7891dc5f7e5c12c9ec408f5
-
SHA512
1819a32c8965cb967e88377e4dd639fad4041fffa3ac0f6488caf3e19b6e6dce998fe7a244068592a47e86c09a43124e7a458ea8a3a13ad2bb4b25cdbecc8a93
-
SSDEEP
3072:otKbcsEcv96LvcQe4PMkPrxfKXXVW49jH:otKbcsF9ede4hKXFRjH
Malware Config
Signatures
Files
-
6b531b3610c346ef62b73e6d9639b3324c31d8dca7891dc5f7e5c12c9ec408f5.exe windows x86
a5e1b6089874320c75cc879280ef9c3f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
ReadFile
CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrlenA
lstrcatA
lstrcpyA
HeapAlloc
GetProcessHeap
GetTempPathA
GetTickCount
ResumeThread
GetProcAddress
LoadLibraryA
VirtualProtect
HeapFree
user32
GetWindowLongA
IsChild
WaitForInputIdle
GetActiveWindow
SetActiveWindow
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE