Static task
static1
Behavioral task
behavioral1
Sample
6682bdbaa7a5cfaed97a368e183110ab96edaaea1fbf7602b3536944847cbe21.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6682bdbaa7a5cfaed97a368e183110ab96edaaea1fbf7602b3536944847cbe21.exe
Resource
win10v2004-20220812-en
General
-
Target
6682bdbaa7a5cfaed97a368e183110ab96edaaea1fbf7602b3536944847cbe21
-
Size
273KB
-
MD5
397a0ec6eb277c3239d9eae47a55e1f0
-
SHA1
3e28ac5994aedb3273925f3c3ce25947d5216160
-
SHA256
6682bdbaa7a5cfaed97a368e183110ab96edaaea1fbf7602b3536944847cbe21
-
SHA512
0f7daa4ae4f6e1aae4f360070307821f518500430d935266d2648e1c805563d2b940424c833aad7bb40507014958588c08667daf24f03db0b89f43600e2101cb
-
SSDEEP
6144:vlfFSArKoVWihZOnSZY9fIgzMzzFnOL9XOT07xVB:vLXrKo9ZAeIfIgozzFnYXOTkT
Malware Config
Signatures
Files
-
6682bdbaa7a5cfaed97a368e183110ab96edaaea1fbf7602b3536944847cbe21.exe windows x86
06ef33a1c45fdabdfa5b6e2e08bce5aa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadCursorW
advapi32
RegQueryValueExW
shell32
ShellExecuteA
ws2_32
htonl
iphlpapi
GetAdaptersInfo
Sections
.text Size: 267KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 24B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE