Static task
static1
Behavioral task
behavioral1
Sample
6199ab9de8686098408b996ef72fb276c40f964b5a7e597433157b9a72e26f27.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6199ab9de8686098408b996ef72fb276c40f964b5a7e597433157b9a72e26f27.exe
Resource
win10v2004-20220812-en
General
-
Target
6199ab9de8686098408b996ef72fb276c40f964b5a7e597433157b9a72e26f27
-
Size
273KB
-
MD5
18a5348a247e2cef386911b98f0bdd6b
-
SHA1
58a5cd67c516384887b65aa8d94a34840c0011ed
-
SHA256
6199ab9de8686098408b996ef72fb276c40f964b5a7e597433157b9a72e26f27
-
SHA512
baee90b7e3bae6d28ad098389550146b358d01b99bf233dac48d03a555ac34b5663d330a8cab0a87948a80a99ec1289a0fca4a2dcdddd4b7bd54fa24c6c63e4c
-
SSDEEP
6144:vlfFSArKoVWihZOnSZY9fIgzMzzFnOL9XOT07AL:vLXrKo9ZAeIfIgozzFnYXOTn
Malware Config
Signatures
Files
-
6199ab9de8686098408b996ef72fb276c40f964b5a7e597433157b9a72e26f27.exe windows x86
06ef33a1c45fdabdfa5b6e2e08bce5aa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadCursorW
advapi32
RegQueryValueExW
shell32
ShellExecuteA
ws2_32
htonl
iphlpapi
GetAdaptersInfo
Sections
.text Size: 267KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 24B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE