Static task
static1
Behavioral task
behavioral1
Sample
6faf18d1e717b8063f72e1984ac4a068a4e0b65416a85d470cbdf07bbf8b65f4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6faf18d1e717b8063f72e1984ac4a068a4e0b65416a85d470cbdf07bbf8b65f4.exe
Resource
win10v2004-20220812-en
General
-
Target
6faf18d1e717b8063f72e1984ac4a068a4e0b65416a85d470cbdf07bbf8b65f4
-
Size
111KB
-
MD5
7f852850bb5d984d60efe0438376d926
-
SHA1
b203dfd78996bc0bfa593ea3b6f20b734eeacf84
-
SHA256
6faf18d1e717b8063f72e1984ac4a068a4e0b65416a85d470cbdf07bbf8b65f4
-
SHA512
d3bbd65373bf8f5152da674ba3e8cfcb5b75e9c9fab52116fb2ed2ee200e78a494813fe0c0801a7afc2c0c5318d96215332d08b2d5e1712d448ea7d7f7237240
-
SSDEEP
3072:cGapRbgJNaoCMALwpuAlfAz6283TF4+eXwaRP324:tIRbPoBEwpdJAzV1FpRP324
Malware Config
Signatures
Files
-
6faf18d1e717b8063f72e1984ac4a068a4e0b65416a85d470cbdf07bbf8b65f4.exe windows x86
cfa9dc38bdcc4652beb9492c5aa570ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BasepCheckWinSaferRestrictions
IsSystemResumeAutomatic
QueryMemoryResourceNotification
UnregisterWait
ActivateActCtx
CancelWaitableTimer
AddLocalAlternateComputerNameW
RemoveVectoredExceptionHandler
GetConsoleOutputCP
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 97KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cduupqo Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE