Static task
static1
Behavioral task
behavioral1
Sample
b6d6e7ef23230bf0753cf79f0cb7e43c2fa5d99197cf855bd12be011756a1ca5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6d6e7ef23230bf0753cf79f0cb7e43c2fa5d99197cf855bd12be011756a1ca5.exe
Resource
win10v2004-20220812-en
General
-
Target
b6d6e7ef23230bf0753cf79f0cb7e43c2fa5d99197cf855bd12be011756a1ca5
-
Size
63KB
-
MD5
6ad81136ab315f9a273626feeb21d800
-
SHA1
23370b7e57b85bb8d21bc20fa1e8cd56ca7e934a
-
SHA256
b6d6e7ef23230bf0753cf79f0cb7e43c2fa5d99197cf855bd12be011756a1ca5
-
SHA512
09ecfd23c13f10f58dfaf5ff84aa186be0607a28a8d587286ecfa2f10acd01e952e32422a584cd249f4218aab911009a70f8a9d29c8d653c1174f5bc0819059d
-
SSDEEP
768:wEfSHruN0wUtAek3l45UlinRcbWiYozbFQ6Rva3OAqSxsOJJViwTlRxjYI:wE3awP3bWrQPWqCh55TlfYI
Malware Config
Signatures
Files
-
b6d6e7ef23230bf0753cf79f0cb7e43c2fa5d99197cf855bd12be011756a1ca5.exe windows x86
4983aecdf68a810e8a8cca75e2f1fcb5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
GetModuleFileNameA
GetEnvironmentStrings
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
CreateProcessA
GetProcAddress
LoadLibraryA
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapFree
HeapAlloc
VirtualAlloc
user32
wsprintfA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 823B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE