Static task
static1
Behavioral task
behavioral1
Sample
6b0cea00632e7f81ea2b505d38888c89a97119e5b2c78687094b7725448fe2f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b0cea00632e7f81ea2b505d38888c89a97119e5b2c78687094b7725448fe2f2.exe
Resource
win10v2004-20220812-en
General
-
Target
6b0cea00632e7f81ea2b505d38888c89a97119e5b2c78687094b7725448fe2f2
-
Size
27KB
-
MD5
4f3e2561729053de2d0677f813bd9530
-
SHA1
435c3bd3f78f3df7bc819fa2e0cc232fbb6944fb
-
SHA256
6b0cea00632e7f81ea2b505d38888c89a97119e5b2c78687094b7725448fe2f2
-
SHA512
bc5679aa11caa7354513000640cb87d59e65df663baafb54ccc2ff4c20d7b439c102bad452e3fdbb1f4129fd3c357afe6e7261394ec6c72a1bdc17e4ced12e9a
-
SSDEEP
96:5KA52g7gnuIt/xljODEQTPNKK7YvObgIG2dQsDUgLZ3CTnO:75v7st/LgPNKK76ObZfQsbl3CTO
Malware Config
Signatures
Files
-
6b0cea00632e7f81ea2b505d38888c89a97119e5b2c78687094b7725448fe2f2.exe windows x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE