Static task
static1
Behavioral task
behavioral1
Sample
c6a40b70437af975af496732844f697a3e5cc8cf358196c787fbe8800fea0fdb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c6a40b70437af975af496732844f697a3e5cc8cf358196c787fbe8800fea0fdb.exe
Resource
win10v2004-20221111-en
General
-
Target
c6a40b70437af975af496732844f697a3e5cc8cf358196c787fbe8800fea0fdb
-
Size
56KB
-
MD5
502a7cb9449ace7c40c5e5bf77b09b34
-
SHA1
81f5e25a463e08bdc48142097405467057f3f685
-
SHA256
c6a40b70437af975af496732844f697a3e5cc8cf358196c787fbe8800fea0fdb
-
SHA512
c189fa54ed22de28a457da7cf962230f5b78c49f2cc8c075b7a465e87d48cc7254a460455c3e1c74c7dbc923122a54651ac3036155be089d00d094f84dc4a534
-
SSDEEP
1536:T7Zw43AloGuvXU/HZ30eb5CSKDVCDu7ZftEp:fZwsXBKBrKDVCDUEp
Malware Config
Signatures
Files
-
c6a40b70437af975af496732844f697a3e5cc8cf358196c787fbe8800fea0fdb.exe windows x86
a88210ef45fdf0dfeca1cb7f08d6a673
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EncodeSystemPointer
SetProcessShutdownParameters
SetEvent
DuplicateConsoleHandle
GetProcessPriorityBoost
WriteProfileSectionA
GetFileAttributesExA
GetFileAttributesA
GetConsoleAliasesLengthW
GetLogicalDrives
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE