Static task
static1
Behavioral task
behavioral1
Sample
6c956534795c78b8fb2bc46b897c5a7de4ddc2ff1fac7333a00d7d48ad402695.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6c956534795c78b8fb2bc46b897c5a7de4ddc2ff1fac7333a00d7d48ad402695.exe
Resource
win10v2004-20221111-en
General
-
Target
6c956534795c78b8fb2bc46b897c5a7de4ddc2ff1fac7333a00d7d48ad402695
-
Size
108KB
-
MD5
85557cad693912f949909e928b64d220
-
SHA1
2ca75296e5de80aa75d3ae90a4e2c3036a27cd6b
-
SHA256
6c956534795c78b8fb2bc46b897c5a7de4ddc2ff1fac7333a00d7d48ad402695
-
SHA512
a2f45ced3044b1b3e1137b78c76bab7a36048545bf48eddb0235e772994656d4534ac96618d5b40d29b7d42a26ce05f512a1bf778b8a9830332b6095ebbc4065
-
SSDEEP
3072:8SrzV+wGwEHXeVXUG6Y/UP/VaUXTFZ27Hzgb0S:XrPpKuVXUG6Y/aXTFZ2X
Malware Config
Signatures
Files
-
6c956534795c78b8fb2bc46b897c5a7de4ddc2ff1fac7333a00d7d48ad402695.exe windows x86
e2e0a4ab21c0c1b7505ebd54da0145fe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharNextA
GetDesktopWindow
kernel32
Sleep
VirtualAlloc
VirtualFree
ExitProcess
Sections
.text Size: 512B - Virtual size: 238B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 233B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dsfwer Size: 4KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE