Static task
static1
Behavioral task
behavioral1
Sample
6933f9f9e37896a9677e5502ff2619a9d60513949e14c05933093d2070a8c13a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6933f9f9e37896a9677e5502ff2619a9d60513949e14c05933093d2070a8c13a.exe
Resource
win10v2004-20220812-en
General
-
Target
6933f9f9e37896a9677e5502ff2619a9d60513949e14c05933093d2070a8c13a
-
Size
207KB
-
MD5
844672e81d49c1724254650ca86d3d27
-
SHA1
68386cc9b1bf31f1d43266bd42c43ba3614ceedc
-
SHA256
6933f9f9e37896a9677e5502ff2619a9d60513949e14c05933093d2070a8c13a
-
SHA512
a16483ecd6c85e6197658e950cb53620bc1ff392aa0f6425d32d929c0963ccf6df94af247a4d499c59adb74d41efccb24c3f3ee672a492b6476a517b4345ca47
-
SSDEEP
6144:O61UGua2dOB3R4QLKuuHOg5VJ9zns2GtGj:ZUDI3RHtuHOgzJ942GG
Malware Config
Signatures
Files
-
6933f9f9e37896a9677e5502ff2619a9d60513949e14c05933093d2070a8c13a.exe windows x86
4416a3dc0820d602467e512cc03a3c30
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
GetModuleHandleW
GetCurrentThread
VirtualFree
ReadFile
VirtualAlloc
IsWow64Process
user32
MessageBoxA
GetGuiResources
Sections
.text Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 398B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ