Static task
static1
Behavioral task
behavioral1
Sample
6df25e1964184e42df5aaf471d597ed2ff2cc0972f8e5be987cdf83ea34cdfe2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6df25e1964184e42df5aaf471d597ed2ff2cc0972f8e5be987cdf83ea34cdfe2.exe
Resource
win10v2004-20220812-en
General
-
Target
6df25e1964184e42df5aaf471d597ed2ff2cc0972f8e5be987cdf83ea34cdfe2
-
Size
60KB
-
MD5
c978c5ce89c4b65ea1a76cd76dbac578
-
SHA1
931254ebc0a436fa3d9270675da61735b5856578
-
SHA256
6df25e1964184e42df5aaf471d597ed2ff2cc0972f8e5be987cdf83ea34cdfe2
-
SHA512
e200c3147f9972aafd68063dda187977ad2def1219a5ea6283a50907587e55993ba1f2b90b950a4c6ec208f0a4ba66e32a2ef20c362740163def67309182c190
-
SSDEEP
1536:9Gdb7F3paVR/OPtu7L9+nAbZ/q8ouNQf:9GP++oAAbZyU
Malware Config
Signatures
Files
-
6df25e1964184e42df5aaf471d597ed2ff2cc0972f8e5be987cdf83ea34cdfe2.exe windows x86
082e7c4451aba52eb8f1af8196c5eb1a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
shell32
SHGetFolderPathA
wininet
InternetOpenA
urlmon
URLDownloadToFileA
Sections
.MPRESS1 Size: 56KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE