Static task
static1
Behavioral task
behavioral1
Sample
6e7cd0ede89bf599b9f43c1dcc54ab673425769ea58da52862a5953b2de3e4e5.exe
Resource
win7-20220812-en
General
-
Target
6e7cd0ede89bf599b9f43c1dcc54ab673425769ea58da52862a5953b2de3e4e5
-
Size
124KB
-
MD5
1645f29f12060421f0eb7fac79e6cea0
-
SHA1
50b48b4b6c317289ffe916a2306d2fd1da9c7637
-
SHA256
6e7cd0ede89bf599b9f43c1dcc54ab673425769ea58da52862a5953b2de3e4e5
-
SHA512
75ad61aeddd9cd8d80a495f93dc651306f644ab199b5e465d560f068b4bdbbed73ffade6f1cc7733e2455673d4a3e8ba7494215601745e3fc94ce2663c55fea9
-
SSDEEP
3072:BBEpJlKnioQ+Ph0XB/MoYc3YrXtKcKHzuMu3scChZ7zNu:BBEpGiBXtKcstK7HCvcvP7
Malware Config
Signatures
Files
-
6e7cd0ede89bf599b9f43c1dcc54ab673425769ea58da52862a5953b2de3e4e5.exe windows x86
f92b6a6591ef40a4bb00667b4fb38ebe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
GetModuleFileNameA
IsValidLocale
lstrcpyW
GetStartupInfoW
SetCurrentDirectoryA
lstrcpyW
GetProcessHeap
FileTimeToLocalFileTime
VirtualAllocEx
lstrcpyW
lstrlenW
lstrcpyW
GetStdHandle
SetLastError
SetConsoleTitleA
DeleteFileA
GetVolumePathNameW
IsBadStringPtrA
lstrcpyW
GetCommState
GetLocaleInfoA
GetModuleHandleA
untfs
Recover
Extend
Format
ChkdskEx
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ