Static task
static1
Behavioral task
behavioral1
Sample
6b237cbcbfd145b970fe2d3de2ebe3275038a91e9fca661cda9e8a394a890f51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b237cbcbfd145b970fe2d3de2ebe3275038a91e9fca661cda9e8a394a890f51.exe
Resource
win10v2004-20221111-en
General
-
Target
6b237cbcbfd145b970fe2d3de2ebe3275038a91e9fca661cda9e8a394a890f51
-
Size
606KB
-
MD5
6ee7a0b383bb1fb72b9fe9149185da1b
-
SHA1
3d1dd350ac103cf09e5de635b423dd493791e82c
-
SHA256
6b237cbcbfd145b970fe2d3de2ebe3275038a91e9fca661cda9e8a394a890f51
-
SHA512
659f0cc1fd03c4347cbe3bb97e1ffcf2fbea0c6409fc1eec9307352edc8ab5a68bb2e02c0dd3b6f822f5383ddb774146513f36f43aa3783933a88d3697ede5b2
-
SSDEEP
3072:QZGbeS0hHvYhNxCL01IGHv0d8C2lyhP0whCvbxltTRtTRtTRtTRtTb:QZGbu0GGMd8C2uPrqp
Malware Config
Signatures
Files
-
6b237cbcbfd145b970fe2d3de2ebe3275038a91e9fca661cda9e8a394a890f51.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 112KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE