Static task
static1
Behavioral task
behavioral1
Sample
a6e7d364f68d0dcf440c6c96dd0f7c317c183843ec6dff195ca3db8bfed11712.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a6e7d364f68d0dcf440c6c96dd0f7c317c183843ec6dff195ca3db8bfed11712.exe
Resource
win10v2004-20221111-en
General
-
Target
a6e7d364f68d0dcf440c6c96dd0f7c317c183843ec6dff195ca3db8bfed11712
-
Size
242KB
-
MD5
e2e12895a98ad757b1d5aa2369c656fd
-
SHA1
75430de1ea90e018ecfd622935a1ea3e46aeee80
-
SHA256
a6e7d364f68d0dcf440c6c96dd0f7c317c183843ec6dff195ca3db8bfed11712
-
SHA512
9edf3315427745f772808cef2d1cc8e0ab6f39db3e308126116182e3831a8b74fcd10d81b337394ffe80d5470757e86a445bb8febe311650b03501dab498b4bd
-
SSDEEP
6144:weBsGQCN/5fTDlpJZyKdnuyAkEyPJBX4fPFtgmOklZGOs:wYsenDvJZyInuyeUBGNisGl
Malware Config
Signatures
Files
-
a6e7d364f68d0dcf440c6c96dd0f7c317c183843ec6dff195ca3db8bfed11712.exe windows x86
f9ed790a98a914583716db9a596c02c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
fopen
fseek
fclose
floor
ceil
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sleep
FreeLibrary
HeapAlloc
HeapFree
LoadLibraryA
GetProcAddress
HeapReAlloc
user32.dll..
CallWindowProcA
wsock32
closesocket
WSACleanup
WSAStartup
Sections
.code Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ