Static task
static1
Behavioral task
behavioral1
Sample
b6e6b5d40ceee7d10ba60a972ce47a172171607562ff9e972641eaf8789ef465.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6e6b5d40ceee7d10ba60a972ce47a172171607562ff9e972641eaf8789ef465.exe
Resource
win10v2004-20221111-en
General
-
Target
b6e6b5d40ceee7d10ba60a972ce47a172171607562ff9e972641eaf8789ef465
-
Size
306KB
-
MD5
2fce5a123cb65c7a52efea937feda745
-
SHA1
3f89d8e5decaa06bed2383bbbe3223d2950235a3
-
SHA256
b6e6b5d40ceee7d10ba60a972ce47a172171607562ff9e972641eaf8789ef465
-
SHA512
30dfeb2088d6a188d97bb8583120256f8382eadf490b04c2eb3ccb8b7c9fe20a4a7c7fc0fd8cdc3208a594faf6068e02495c26dcfb0356db73d965a54c5e8f11
-
SSDEEP
6144:Y/SOyYQlWE8JyByKFn3MTGUYm/9SSSSSSSSSSmQoDghJzHB:YxPKFcTGBYUQtlHB
Malware Config
Signatures
Files
-
b6e6b5d40ceee7d10ba60a972ce47a172171607562ff9e972641eaf8789ef465.exe windows x86
fdbfec85672f73d2a4d49635454936d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
user32
MessageBoxA
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 56KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE