Static task
static1
Behavioral task
behavioral1
Sample
bee6c014ce8b5eaecb22da6cd9238a237cf5a439f29a1077e9c291ef60870d1a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bee6c014ce8b5eaecb22da6cd9238a237cf5a439f29a1077e9c291ef60870d1a.exe
Resource
win10v2004-20220901-en
General
-
Target
bee6c014ce8b5eaecb22da6cd9238a237cf5a439f29a1077e9c291ef60870d1a
-
Size
310KB
-
MD5
4f72046a2f9724227e9690556f916fbd
-
SHA1
4fe7834c26fce8b3a98443334eaf8b89a0ac4833
-
SHA256
bee6c014ce8b5eaecb22da6cd9238a237cf5a439f29a1077e9c291ef60870d1a
-
SHA512
0a8cf41ea70cae3db2d32de2753015833ec7d2be450b0b0a2afa621d283f6813af045c9fb5df841da25a9dc45adcdfcbdb3d65ca237f349dafbd5176320e6d5f
-
SSDEEP
6144:F1HhUlsHQv8VkPIJitv/t6Nbz3xuFJaw4zmRWiChlLibj2TUTKC5OCIAOaq/c:FPUlKU0kPAitv/tez3sJa/8WjlLi9QAO
Malware Config
Signatures
Files
-
bee6c014ce8b5eaecb22da6cd9238a237cf5a439f29a1077e9c291ef60870d1a.exe windows x86
d740c6b869dac154ef6e51097ce3173a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
TerminateThread
GetLastError
CloseHandle
VirtualFree
GetFileSize
VirtualAlloc
LeaveCriticalSection
GetCurrentThreadId
OpenFileMappingA
FlushFileBuffers
Sleep
GetProcAddress
CreateFileA
ReleaseMutex
user32
RegisterClassA
LoadAcceleratorsA
netapi32
NetDfsRemoveFtRootForced
avifil32
AVISaveOptions
AVISaveOptionsFree
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 205KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xvda Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE