Static task
static1
Behavioral task
behavioral1
Sample
b6f125f0b781494ac497a641a67b804f041c1fa6ace6c5ba8b92d9356958e0b4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6f125f0b781494ac497a641a67b804f041c1fa6ace6c5ba8b92d9356958e0b4.exe
Resource
win10v2004-20220812-en
General
-
Target
b6f125f0b781494ac497a641a67b804f041c1fa6ace6c5ba8b92d9356958e0b4
-
Size
15KB
-
MD5
e3e80e20e9b6c493597be7438034f56d
-
SHA1
4a1e883a1f254ce256a6bf8d7737d105561e9c96
-
SHA256
b6f125f0b781494ac497a641a67b804f041c1fa6ace6c5ba8b92d9356958e0b4
-
SHA512
46f38fc16fcb41e708a47d098aebeb079c0e2429426451f1595416dfa8cbbf8057da818b96c98f40e1a3e7c66f043b47998ae799c2584014609345a61f87fe1c
-
SSDEEP
96:unYBxbTmBBjkcfrAlhNHc2BywoAJPQYi3K1DntAfdomPdHWsyzUpNXw7b:k+bTQBk4Alh9pBpbtQYQK5YouI1UA7b
Malware Config
Signatures
Files
-
b6f125f0b781494ac497a641a67b804f041c1fa6ace6c5ba8b92d9356958e0b4.exe windows x86
b093b9b6223af7f9e72d34d8765aa77f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA
kernel32
CloseHandle
CreateProcessA
ExitProcess
GetThreadContext
ResumeThread
SetThreadContext
VirtualAllocEx
WriteProcessMemory
msvcrt
memset
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 48B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 548B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE