Static task
static1
Behavioral task
behavioral1
Sample
a6f79d91980eb13be47260b5af770f6177cfcbd97d9b2a6ab9a4a86323a81225.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a6f79d91980eb13be47260b5af770f6177cfcbd97d9b2a6ab9a4a86323a81225.exe
Resource
win10v2004-20221111-en
General
-
Target
a6f79d91980eb13be47260b5af770f6177cfcbd97d9b2a6ab9a4a86323a81225
-
Size
232KB
-
MD5
abffea6c616e2d2d1bc89e10a041d095
-
SHA1
f607816f824ad232417e2b9d2f028499f0029bca
-
SHA256
a6f79d91980eb13be47260b5af770f6177cfcbd97d9b2a6ab9a4a86323a81225
-
SHA512
e1a9a75e56169f27b67b34e778052d07eda2faa3ec1a84d5fc23f9af645944efbf2c2305215bbb9622fddffd5a53fff655a9eb67af3cb25f75fa8e7e54155f7a
-
SSDEEP
6144:zrNZCxON8SEM8L+UYrbdD3NO8zErSFJF:zxY8nCoD9O85J
Malware Config
Signatures
Files
-
a6f79d91980eb13be47260b5af770f6177cfcbd97d9b2a6ab9a4a86323a81225.exe windows x86
d138b4428074a69c52cd454d3426b9ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
Sections
.text Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 168KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
efccc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE