Static task
static1
Behavioral task
behavioral1
Sample
f6d6e3081e39c20fb5134205530543a7ac7814748479458dc067d54ca182251c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f6d6e3081e39c20fb5134205530543a7ac7814748479458dc067d54ca182251c.exe
Resource
win10v2004-20221111-en
General
-
Target
f6d6e3081e39c20fb5134205530543a7ac7814748479458dc067d54ca182251c
-
Size
56KB
-
MD5
acd8ded73f410d46ae229db0e60fab14
-
SHA1
76c3db31bfdf0f98fb294741033b1c97e2c5faea
-
SHA256
f6d6e3081e39c20fb5134205530543a7ac7814748479458dc067d54ca182251c
-
SHA512
fd8caf1bdd1568efbe397638e01c5fb794c61776e016431ddfe04b4250b5ab87fc3b46a51863bd431cba2c17bd666ac5694429eb5665e6a71055baa75d5d1c62
-
SSDEEP
1536:z/dX0jYmrq6l6CnJHuc20wYxJPxRdWn/JM7di5PG4aMEzxw:jF07q6oCO09Ny//adxw
Malware Config
Signatures
Files
-
f6d6e3081e39c20fb5134205530543a7ac7814748479458dc067d54ca182251c.exe windows x86
e85232df7511a77ed8914c4023a5909e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleOutputAttribute
TransmitCommChar
LockFileEx
BaseInitAppcompatCache
GetFirmwareEnvironmentVariableW
DelayLoadFailureHook
OpenEventA
SetFileTime
BuildCommDCBA
CreateFiber
ReleaseActCtx
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE