Static task
static1
Behavioral task
behavioral1
Sample
a600e6959934ebe057a09b26d7cc666632e1f146853071ae07db2c516c3ee0a3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a600e6959934ebe057a09b26d7cc666632e1f146853071ae07db2c516c3ee0a3.exe
Resource
win10v2004-20220812-en
General
-
Target
a600e6959934ebe057a09b26d7cc666632e1f146853071ae07db2c516c3ee0a3
-
Size
14KB
-
MD5
5a9f117c8a086af488983f4ba286523c
-
SHA1
598a077f1acdf56757fa746a306ad81a0bce6f9b
-
SHA256
a600e6959934ebe057a09b26d7cc666632e1f146853071ae07db2c516c3ee0a3
-
SHA512
ddffdfd5f4664eb91a5ffcb277c874048bd3038c60b80658d9e8c6b4f3434195005d2e7dfdf8f65a14f4acce08c6a18f4ba2a9f091308bcdc2d05480944ed79f
-
SSDEEP
384:/q1zSSOzkHHdTEIOSFJaPyDplFKVmG3Ur8l:C4lzkHHdoBtPJmGg
Malware Config
Signatures
Files
-
a600e6959934ebe057a09b26d7cc666632e1f146853071ae07db2c516c3ee0a3.exe windows x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.pepsi Size: 12KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE