Static task
static1
Behavioral task
behavioral1
Sample
01c6d382561694ea33c92c2c96ca2fc8e5ac4b460aa351389153431eb71ff036.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
01c6d382561694ea33c92c2c96ca2fc8e5ac4b460aa351389153431eb71ff036.exe
Resource
win10v2004-20221111-en
General
-
Target
01c6d382561694ea33c92c2c96ca2fc8e5ac4b460aa351389153431eb71ff036
-
Size
104KB
-
MD5
9c216420ff18e450917b712c956b04aa
-
SHA1
1a72e12db38c83810c748216361054d8311dcf06
-
SHA256
01c6d382561694ea33c92c2c96ca2fc8e5ac4b460aa351389153431eb71ff036
-
SHA512
c1836c411d30fde6ecfa4f32971a1415c46e28df630e0366e9b4d9bbd249dde1cd514b400476ac3cadf5595e98b791b2d86a8e178385adb3b81ae1c37e28c8cd
-
SSDEEP
3072:VrRZ2uscxG916sxUpETcREQZ6gxnQDZ8joET0F:bZYcEXdhZ9Oi
Malware Config
Signatures
Files
-
01c6d382561694ea33c92c2c96ca2fc8e5ac4b460aa351389153431eb71ff036.exe windows x86
6bab5e182e9e54cf716ff26e94deb11b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RegisterConsoleOS2
LocalAlloc
BaseCleanupAppcompatCacheSupport
GetConsoleAliasesLengthW
AssignProcessToJobObject
ConvertThreadToFiber
IsValidLocale
FindFirstVolumeMountPointA
LZCreateFileW
BaseDumpAppcompatCache
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE