Static task
static1
Behavioral task
behavioral1
Sample
b6e4f89352611004e9f5cf1d57d10c04c1df3e32205d441db29b1167dd68c3d7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6e4f89352611004e9f5cf1d57d10c04c1df3e32205d441db29b1167dd68c3d7.exe
Resource
win10v2004-20221111-en
General
-
Target
b6e4f89352611004e9f5cf1d57d10c04c1df3e32205d441db29b1167dd68c3d7
-
Size
63KB
-
MD5
ca7e77da33c0ef992a615c2c616b0c9c
-
SHA1
b28dd70f9b0eab845b801726ab9895b50ac68619
-
SHA256
b6e4f89352611004e9f5cf1d57d10c04c1df3e32205d441db29b1167dd68c3d7
-
SHA512
bba0479ab5f7e5300fcb21a7a77a26b1879b62c4e49301bc3b50db58257e95c952ed4aea0d9e2532126cfe239e17147e02694b64519301dbc76ffa1d66985ba7
-
SSDEEP
1536:454CnhpZeFD4zEcqPD+/2u7mbV5UdH8cQD9++N5X:45LhSD4ziy/2jvUdH8T++N5X
Malware Config
Signatures
Files
-
b6e4f89352611004e9f5cf1d57d10c04c1df3e32205d441db29b1167dd68c3d7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 57KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ