Static task
static1
Behavioral task
behavioral1
Sample
a6fefcf742f4251fd6c1c5701ba42ac91789c902be9a3839daa26bcc1419246f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6fefcf742f4251fd6c1c5701ba42ac91789c902be9a3839daa26bcc1419246f.exe
Resource
win10v2004-20220901-en
General
-
Target
a6fefcf742f4251fd6c1c5701ba42ac91789c902be9a3839daa26bcc1419246f
-
Size
111KB
-
MD5
81c93a51f53a398fee3c1a9463c149c5
-
SHA1
ad04b268e0f145d56453035d648333ae14e3e29f
-
SHA256
a6fefcf742f4251fd6c1c5701ba42ac91789c902be9a3839daa26bcc1419246f
-
SHA512
6556261c5f2dede2fddacf142aa7aa4b3152ceb689523f03d0e537f3554b325e386d2e74b9306e973a20975c277eaa45df2f34023d4e39626e10e9558981bd77
-
SSDEEP
3072:neFs0+CNYFm++19axl4oO76SaFClM1veUR3RY4:neFsHCNR++yQx76TClM1veURhH
Malware Config
Signatures
Files
-
a6fefcf742f4251fd6c1c5701ba42ac91789c902be9a3839daa26bcc1419246f.exe windows x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.. Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE