Static task
static1
Behavioral task
behavioral1
Sample
6a65a56bead3098b1d01827714ab7d9dc883b47a0243467da0a88abba18e2ab5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6a65a56bead3098b1d01827714ab7d9dc883b47a0243467da0a88abba18e2ab5.exe
Resource
win10v2004-20221111-en
General
-
Target
6a65a56bead3098b1d01827714ab7d9dc883b47a0243467da0a88abba18e2ab5
-
Size
580KB
-
MD5
584d86e6264d32b54eb22ff166beceb0
-
SHA1
3de5824cf26906f585826ba4ab252ab74eb17451
-
SHA256
6a65a56bead3098b1d01827714ab7d9dc883b47a0243467da0a88abba18e2ab5
-
SHA512
eb53f32200abef21dbc4af9660365aa857b41e81d8a0050d8e96f67139d76f1b46d911293ae397d8182b17096b26d4d6d68b6f9fb644a32f75fa2ef477c5b79f
-
SSDEEP
12288:uzvAquvIlhkweD5NxIALRVj+epB042j8XAl5a43OsXlooDPyfVzvAquvIlh:uzvAZOhJyhzBnTAnaSOsVooDKzvAZOh
Malware Config
Signatures
Files
-
6a65a56bead3098b1d01827714ab7d9dc883b47a0243467da0a88abba18e2ab5.exe windows x86
53e92335e74fd01f0d86758a87341ec2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteW
iphlpapi
GetAdaptersInfo
ws2_32
gethostbyaddr
wtsapi32
WTSRegisterSessionNotification
Sections
.SRC Size: - Virtual size: 1.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SRC Size: 527KB - Virtual size: 528KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE