Static task
static1
Behavioral task
behavioral1
Sample
6ef1fe9081a3ac64e16fa4fc61bc68e539e934f26d3aaa616755b3b453761f29.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6ef1fe9081a3ac64e16fa4fc61bc68e539e934f26d3aaa616755b3b453761f29.exe
Resource
win10v2004-20220812-en
General
-
Target
6ef1fe9081a3ac64e16fa4fc61bc68e539e934f26d3aaa616755b3b453761f29
-
Size
375KB
-
MD5
2c37e90674660c7d028812353404e740
-
SHA1
fe481d1c0f64ebbcb93bc000d67296dc1ba07d7f
-
SHA256
6ef1fe9081a3ac64e16fa4fc61bc68e539e934f26d3aaa616755b3b453761f29
-
SHA512
5cf0c825b67116dff0581f064c7d8b60f436bbc138e065236175f38f15299b23dd4c299de51a043b1e188f921482b46c56c6e3dcb20b5f676450ff47a64abe98
-
SSDEEP
6144:6YEoo/4rnzsBw+EwKEnePrNqhdFvmNpqB/A8/QJQCe2zdRQ0yhmcvZpIw0+:6uHrcYPkePhqpvmaBvYJQCe2I9fi+
Malware Config
Signatures
Files
-
6ef1fe9081a3ac64e16fa4fc61bc68e539e934f26d3aaa616755b3b453761f29.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 361KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE