Static task
static1
Behavioral task
behavioral1
Sample
c6d02727ece4d32d2afb54e10f406bfec95839db38aeb374e51c8352f1b77bbf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6d02727ece4d32d2afb54e10f406bfec95839db38aeb374e51c8352f1b77bbf.exe
Resource
win10v2004-20220901-en
General
-
Target
c6d02727ece4d32d2afb54e10f406bfec95839db38aeb374e51c8352f1b77bbf
-
Size
94KB
-
MD5
4a0ec829bf415a56440c9bd4c68acf5b
-
SHA1
158056f0d20eccab7b5094b1d756caa37543fd84
-
SHA256
c6d02727ece4d32d2afb54e10f406bfec95839db38aeb374e51c8352f1b77bbf
-
SHA512
9c1f7d92d35ba3d68b67c3c1787d23147fc1b077c6108571830fcbc3ef3418e181fadab390e88a92aaa7795fd7637881b41e04edb80e98a5ba2a7daa5b64e075
-
SSDEEP
1536:zNFDFi7gD6n06ZMWUjpYD2pKcyZUWPHpOejuJVc4EFxVNrAa0Z+:zjOgmEFj6DxFicHpfjSfGyZ
Malware Config
Signatures
Files
-
c6d02727ece4d32d2afb54e10f406bfec95839db38aeb374e51c8352f1b77bbf.exe windows x86
ebc8d77f656b6daeba6202cbbb5cf198
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32FirstW
DeleteVolumeMountPointA
EnumSystemLanguageGroupsA
WriteConsoleW
GetPrivateProfileSectionNamesW
VDMOperationStarted
PostQueuedCompletionStatus
RtlFillMemory
GetCommMask
DebugSetProcessKillOnExit
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ani Size: 37KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE