Static task
static1
Behavioral task
behavioral1
Sample
f6efa9b1e97c9a5c077c1fc6b0e0e669429f53b5d94f8a74357c6242981411fb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f6efa9b1e97c9a5c077c1fc6b0e0e669429f53b5d94f8a74357c6242981411fb.exe
Resource
win10v2004-20220901-en
General
-
Target
f6efa9b1e97c9a5c077c1fc6b0e0e669429f53b5d94f8a74357c6242981411fb
-
Size
84KB
-
MD5
866d1501b2c46d54eb979b42e6b609dc
-
SHA1
cc7668c53ca3b23973193dc07c85445d8660ee5f
-
SHA256
f6efa9b1e97c9a5c077c1fc6b0e0e669429f53b5d94f8a74357c6242981411fb
-
SHA512
4ffa2db60e13acaa3c57dfbcc1df1e176c78f03d23bd4a7abc3a49c73408306f91f4e8ee57989e60d4f70a9fe3c78af084c9868b89bf0e0f9a621bad6a6af3eb
-
SSDEEP
1536:2WF5xX7jjAi55vGrw/Qsx+YVKzlESkFkBK/hHU5Y1NhaSGixVzgqi0JBftd:2At7fAimrO+YVIMBphiAbDtd
Malware Config
Signatures
Files
-
f6efa9b1e97c9a5c077c1fc6b0e0e669429f53b5d94f8a74357c6242981411fb.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 80KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE