Static task
static1
Behavioral task
behavioral1
Sample
6cc239ee5594f52f5c83365afa096fe8a6bac2987a1d1b12128286fc096857c0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6cc239ee5594f52f5c83365afa096fe8a6bac2987a1d1b12128286fc096857c0.exe
Resource
win10v2004-20221111-en
General
-
Target
6cc239ee5594f52f5c83365afa096fe8a6bac2987a1d1b12128286fc096857c0
-
Size
128KB
-
MD5
6b4ffd5e90632def24089ddeb55191e0
-
SHA1
f1b4f14b18ca542c59187faca4302eb76913c13e
-
SHA256
6cc239ee5594f52f5c83365afa096fe8a6bac2987a1d1b12128286fc096857c0
-
SHA512
4e7952b3d92b292ab4c5c09864144d72ca907a8a24280566bb817bb163286bcf9f5619eb050ddccbdad767a9e43b3a2d46465692d4579db4ad66924671a01971
-
SSDEEP
3072:lrCXUg3Tp8ohucU1mNEEdnhrOc+AnDyy0S0I:VCEgDpOHnEthp+gZJ0
Malware Config
Signatures
Files
-
6cc239ee5594f52f5c83365afa096fe8a6bac2987a1d1b12128286fc096857c0.exe windows x86
6a3a0aef814626882b53fd777cbae3df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetFileAttributesExA
ConnectNamedPipe
SetConsoleActiveScreenBuffer
SetHandleInformation
LocalShrink
GlobalFix
GetProcessShutdownParameters
ExitProcess
GetStartupInfoA
Sections
CODE Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
WEIJUNLI Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA