Static task
static1
Behavioral task
behavioral1
Sample
6658904addd4d5439205d43d478913a225a5e08af730be6f48a76f27923c1abe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6658904addd4d5439205d43d478913a225a5e08af730be6f48a76f27923c1abe.exe
Resource
win10v2004-20221111-en
General
-
Target
6658904addd4d5439205d43d478913a225a5e08af730be6f48a76f27923c1abe
-
Size
111KB
-
MD5
16a1e29c381208e80d706bdd1278bc93
-
SHA1
b101585095ad370507d31d871cb2dca903e440a8
-
SHA256
6658904addd4d5439205d43d478913a225a5e08af730be6f48a76f27923c1abe
-
SHA512
8593755b9897f381067bc0eeb967e376b3d99b7fda6ba691cb69d8a490dfb085a833fd06c55885050171791c0f82bbe6b9fedf4d1b016f93185a2b73c8146a76
-
SSDEEP
1536:/5M4PwsklZUZE752wnDYCau9gMLCPvejoRSdaNuWFTKTJpe6yrGfS/of6LJ6+Km5:hMuMlOCtjCPveFdaxFOcGO63NoOXC
Malware Config
Signatures
Files
-
6658904addd4d5439205d43d478913a225a5e08af730be6f48a76f27923c1abe.exe windows x86
e3753af4a6d8e4b619857578da3171e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedCompareExchange
SetFileShortNameW
GetDateFormatA
DisconnectNamedPipe
CopyFileExA
SetWaitableTimer
CreateDirectoryW
GetThreadIOPendingFlag
TransmitCommChar
LZOpenFileW
EncodePointer
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 97KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cduupqo Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE