Static task
static1
Behavioral task
behavioral1
Sample
6512b4d49848c0919aef9185d6e8ae89bc6d86140d5520b5baa7dae366bcea05.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6512b4d49848c0919aef9185d6e8ae89bc6d86140d5520b5baa7dae366bcea05.exe
Resource
win10v2004-20221111-en
General
-
Target
6512b4d49848c0919aef9185d6e8ae89bc6d86140d5520b5baa7dae366bcea05
-
Size
154KB
-
MD5
2ee86c708c8ea8ef07d9bc1762c53610
-
SHA1
ff152a652a4ffe3b057938b099623798fe523ce8
-
SHA256
6512b4d49848c0919aef9185d6e8ae89bc6d86140d5520b5baa7dae366bcea05
-
SHA512
df54439a2f3f0cf6d4d73632ef0bebaa00fa55f3eb41d4083a3ecefc6f55d46fbf12e1fe5f3b057f5ad2b88944067ea601de109033cf798d6c0937f492ddc86d
-
SSDEEP
3072:GGyeT/ma/TMc1zwLvSoWnurC1zVt1Ow7+khINo1fvFeG292:GG7T+Qwc1z2rWVt1VIKRvFeR2
Malware Config
Signatures
Files
-
6512b4d49848c0919aef9185d6e8ae89bc6d86140d5520b5baa7dae366bcea05.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 126KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE