Static task
static1
Behavioral task
behavioral1
Sample
6e3981f514a84043b6774335616208c3238a2b77771f0f6fd7704460edbe8e31.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6e3981f514a84043b6774335616208c3238a2b77771f0f6fd7704460edbe8e31.exe
Resource
win10v2004-20221111-en
General
-
Target
6e3981f514a84043b6774335616208c3238a2b77771f0f6fd7704460edbe8e31
-
Size
94KB
-
MD5
a42c7e9512a2fbb375e1228cd1e3b123
-
SHA1
144bfbb8da64aff2abdedfa1cfa7f3bddeea8d1c
-
SHA256
6e3981f514a84043b6774335616208c3238a2b77771f0f6fd7704460edbe8e31
-
SHA512
5d1081947d80afbf41a29b6941feeb47c93fc2c5cc206dabbc11767e9f000edf845766483bddf170eba40b751f9c41abb3b0e1986d84d8c2e878efe0ef2ee2e4
-
SSDEEP
1536:H+8uze7jCnZinQjT6kYCX6Aycrhtgmji0VVFKnp+c3EjuJVc4EFxVNrAa0Z+:H+8uzeidT6rCKAycngFEjhjSfGyZ
Malware Config
Signatures
Files
-
6e3981f514a84043b6774335616208c3238a2b77771f0f6fd7704460edbe8e31.exe windows x86
328fb8a17dbcdea11b5f372c5b40b707
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
SystemTimeToFileTime
UnregisterWaitEx
GetFileSize
lstrcpynA
DebugBreak
GetCPInfo
BackupRead
OutputDebugStringW
HeapLock
GetConsoleNlsMode
DisconnectNamedPipe
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ani Size: 37KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE