Static task
static1
Behavioral task
behavioral1
Sample
f6559927cc22b1399c7e374e106514669a5b16f6adf04b93f1bc95e1b5b9e5a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6559927cc22b1399c7e374e106514669a5b16f6adf04b93f1bc95e1b5b9e5a8.exe
Resource
win10v2004-20221111-en
General
-
Target
f6559927cc22b1399c7e374e106514669a5b16f6adf04b93f1bc95e1b5b9e5a8
-
Size
382KB
-
MD5
0be752959742a3ca66a19d41641ee50d
-
SHA1
ad963d1a4a49e8f3ca21c9cbf409a714afb6d77f
-
SHA256
f6559927cc22b1399c7e374e106514669a5b16f6adf04b93f1bc95e1b5b9e5a8
-
SHA512
407abfddcf8b6648c89f6b773954466c17179b634eda991e40ce65b0f059599f05960e3b128f0cab891ba3ef4c53dc1003a40135b418b69d2d4188cc7222abb2
-
SSDEEP
3072:dSsvihLlTQz9z71iURo2SJJmY6uFNcgifDbMtJyVdyw:ssqhJMxzJiU5SeLmNSbMtJU5
Malware Config
Signatures
Files
-
f6559927cc22b1399c7e374e106514669a5b16f6adf04b93f1bc95e1b5b9e5a8.exe windows x64
9f60ca72d75c1cfd8d9fd379579518de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernelbase
GetModuleHandleW
GetProcAddress
LoadLibraryExA
VirtualProtect
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE