Static task
static1
Behavioral task
behavioral1
Sample
d06b006cb045c85dd38716522bb12f2d81d07ae505fdeb79400204467f93c8a9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d06b006cb045c85dd38716522bb12f2d81d07ae505fdeb79400204467f93c8a9.exe
Resource
win10v2004-20220812-en
General
-
Target
d06b006cb045c85dd38716522bb12f2d81d07ae505fdeb79400204467f93c8a9
-
Size
63KB
-
MD5
4685f8254410d2d7f00d0d79ec8261a8
-
SHA1
12861dd6956e681116230460ee3e4056774c2437
-
SHA256
d06b006cb045c85dd38716522bb12f2d81d07ae505fdeb79400204467f93c8a9
-
SHA512
750f57ba7e26bf3b1a8f7fe0f54f5b5b27babea9e2e0458890658df0ffe23cfe00f3d91eeef05e3468ae81d780d8497b05abd363fe1d105f7a1cea0bea54fe0b
-
SSDEEP
1536:x9wBEiIyBH5hfsTdM1RtFFi5umm5Zgv1723w:YBbIyBHffviJmLgd7Uw
Malware Config
Signatures
Files
-
d06b006cb045c85dd38716522bb12f2d81d07ae505fdeb79400204467f93c8a9.exe windows x86
66a39638f2c0f5b77394cd30f73419fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFiber
CancelIo
NlsConvertIntegerToString
SetFirmwareEnvironmentVariableW
LockFile
ClearCommBreak
GetSystemTime
SetComputerNameA
CompareStringA
AddAtomA
GetStringTypeExA
DosPathToSessionPathA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE