Static task
static1
Behavioral task
behavioral1
Sample
b6b8bed5827b18e0d8cf957903422f9c7d8e5333ac38f1bf3e1ebe946274b63e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6b8bed5827b18e0d8cf957903422f9c7d8e5333ac38f1bf3e1ebe946274b63e.exe
Resource
win10v2004-20220812-en
General
-
Target
b6b8bed5827b18e0d8cf957903422f9c7d8e5333ac38f1bf3e1ebe946274b63e
-
Size
103KB
-
MD5
215e094423f8e22cbf668c6e1e436923
-
SHA1
a4da84eccc8b144fd6b10430ec1357c9d60b03fb
-
SHA256
b6b8bed5827b18e0d8cf957903422f9c7d8e5333ac38f1bf3e1ebe946274b63e
-
SHA512
fec1ea8b7ab8ebe6ced9d11d1b8a326917c97c9adc8753c876226921c1494560a1ea23f388b112753cdd613e256b25bbf9b9fc87ee9fdd250074f60993663573
-
SSDEEP
1536:Fq1+HhUCO9ND+mxjIdmfUYd1e3daRhdsRxO2:FQ0mCO91VxjITYne3dajL2
Malware Config
Signatures
Files
-
b6b8bed5827b18e0d8cf957903422f9c7d8e5333ac38f1bf3e1ebe946274b63e.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 40KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE