Static task
static1
Behavioral task
behavioral1
Sample
6fff98ff91311289bc345857fb12dfe585ad33cb9f16fbe0da1a37bcf5ee1a63.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6fff98ff91311289bc345857fb12dfe585ad33cb9f16fbe0da1a37bcf5ee1a63.exe
Resource
win10v2004-20220901-en
General
-
Target
6fff98ff91311289bc345857fb12dfe585ad33cb9f16fbe0da1a37bcf5ee1a63
-
Size
505KB
-
MD5
d5cf7a6b2fa5b6b1889b7605e5e54c28
-
SHA1
6815aa7bca9e13d8de9dbf701e278d432fa9422f
-
SHA256
6fff98ff91311289bc345857fb12dfe585ad33cb9f16fbe0da1a37bcf5ee1a63
-
SHA512
62dbdeffd7757aca72a077660b09f0ccae082fcb0a5420ff0e9ed32faff840b5c303cb11b6fb728ff4bf8ace9be9b69f7dc1e1dc5e28cc7999de2b33a48a3fa8
-
SSDEEP
12288:e5hAPjw4KYBFJSytVB2cHUcrfbfssqPUfPaJrVmi7:eg8CFttVQuUcrfTneOZi
Malware Config
Signatures
Files
-
6fff98ff91311289bc345857fb12dfe585ad33cb9f16fbe0da1a37bcf5ee1a63.exe windows x86
6d1f028787ecd18f946abf29ae022207
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
iphlpapi
GetAdaptersInfo
ws2_32
htonl
wtsapi32
WTSRegisterSessionNotification
Sections
.text Size: 65KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 386KB - Virtual size: 623KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FAGSRWT Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE