Static task
static1
Behavioral task
behavioral1
Sample
6420127bd899188ba1e60b15212620c24ead22318af65fc2211b96721e61747c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6420127bd899188ba1e60b15212620c24ead22318af65fc2211b96721e61747c.exe
Resource
win10v2004-20221111-en
General
-
Target
6420127bd899188ba1e60b15212620c24ead22318af65fc2211b96721e61747c
-
Size
127KB
-
MD5
0f17809a11da824c50a1c5ed09ba6d48
-
SHA1
9c671032f60ca630a90608bdc7072a83a2a5c51a
-
SHA256
6420127bd899188ba1e60b15212620c24ead22318af65fc2211b96721e61747c
-
SHA512
71f5b9b0430b66b996a332e073d76b30dc11c987b52ec91ce64c3f798030de8fdea1d0466f822ce9d8b375d704068aa995bf9cc1e217e6589db7b6bc309f8e9e
-
SSDEEP
3072:j9aZ+KEXf8AP14alapRbASPB5F9eUY1ugfqO9QOBsc0DT:paqf8APCalapRbASPBQUY1u6wv
Malware Config
Signatures
Files
-
6420127bd899188ba1e60b15212620c24ead22318af65fc2211b96721e61747c.exe windows x86
0d25f3499158ee89d77a839aa1690e1a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextVolumeW
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE