Static task
static1
Behavioral task
behavioral1
Sample
b6179c33385e03514cc139b7f000830148af73fa4b4d3e3d9679819106449d3d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6179c33385e03514cc139b7f000830148af73fa4b4d3e3d9679819106449d3d.exe
Resource
win10v2004-20220812-en
General
-
Target
b6179c33385e03514cc139b7f000830148af73fa4b4d3e3d9679819106449d3d
-
Size
76KB
-
MD5
743f5ff17a9416cf5d5fe02e0f3d0c2f
-
SHA1
4de3a3e3b685925eb396d4e6b53a846cac9be247
-
SHA256
b6179c33385e03514cc139b7f000830148af73fa4b4d3e3d9679819106449d3d
-
SHA512
5c7f02961764079866e365e3b5e01d2b21dda4466e37f615792e1e98e1ff669709af8b5446d8fd3a704548d3d1b58fd469a5ce60d79e30114cc2abe6b5b40d06
-
SSDEEP
1536:2gCr2OTeCUaxxxEQ5aQAciqdFjd3+w0OjB/KHUWmamGxxxROIb4GYV2o1sriM+xM:2gCr2OtUaxxxEQ5n7H+wBs0WmamGxxxq
Malware Config
Signatures
Files
-
b6179c33385e03514cc139b7f000830148af73fa4b4d3e3d9679819106449d3d.exe windows x86
b30674579690966562c648cefa006596
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtCreateFile
dhcpcsvc
McastEnumerateScopes
kernel32
lstrcpyA
SetUnhandledExceptionFilter
SetEvent
VirtualAlloc
GetCurrentThreadId
LeaveCriticalSection
QueryPerformanceCounter
GetModuleHandleA
HeapCreate
GetProcAddress
GetCurrentProcessId
GetCurrentProcess
EnterCriticalSection
GetSystemTimeAsFileTime
lstrcmpA
HeapDestroy
HeapAlloc
TerminateProcess
Sleep
lstrlenA
HeapFree
msvcrt
_initterm
_adjust_fdiv
free
malloc
Sections
.textbss Size: - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE