Static task
static1
Behavioral task
behavioral1
Sample
6f29a57168a2554494a434b6de8ea59b0d02d5cf5d051c55d509d30d8a5164e6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6f29a57168a2554494a434b6de8ea59b0d02d5cf5d051c55d509d30d8a5164e6.exe
Resource
win10v2004-20220812-en
General
-
Target
6f29a57168a2554494a434b6de8ea59b0d02d5cf5d051c55d509d30d8a5164e6
-
Size
120KB
-
MD5
1a65a31774e3cbdc3d89cf293f3dbf7f
-
SHA1
1e12a0654d4316b55c49c263aef672b376535777
-
SHA256
6f29a57168a2554494a434b6de8ea59b0d02d5cf5d051c55d509d30d8a5164e6
-
SHA512
bbb95c411ed9c3544c2a79dca11f025aa36cf3b4e1bb7f060728f33a51af6eccb12270df8db20776f94969335d6d47cc7f90387d0a5d37f80790c2f97169bea4
-
SSDEEP
3072:p/mueJicjfoILOadcJzRJUFCKnx4+LXGbj6UvQ:p/RCimD/eJRGnx4UXGblvQ
Malware Config
Signatures
Files
-
6f29a57168a2554494a434b6de8ea59b0d02d5cf5d051c55d509d30d8a5164e6.exe windows x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE