Static task
static1
Behavioral task
behavioral1
Sample
d6e7f5f8f190daf901baa87572e6537b6e9d18d7649b8ba9475060850813316e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6e7f5f8f190daf901baa87572e6537b6e9d18d7649b8ba9475060850813316e.exe
Resource
win10v2004-20220901-en
General
-
Target
d6e7f5f8f190daf901baa87572e6537b6e9d18d7649b8ba9475060850813316e
-
Size
311KB
-
MD5
ad58847358648bbb9bbc8e2bd2984e94
-
SHA1
5ca3ae9481a87bca046cccfa09c273b824e9f20c
-
SHA256
d6e7f5f8f190daf901baa87572e6537b6e9d18d7649b8ba9475060850813316e
-
SHA512
6cbcb2cbbedf3b61bc8647caaee245888db25621524ca0631e2eaa58267709f503530cbce4a9604d11e1f0b4c2b06b8aa9e0ea11399334d8ccbf45b0aba9eec8
-
SSDEEP
6144:pXSQxDyK0c06vDT5Ossa/QT6/azMTRSu3UvAQvlT+VV:TmK0c0fssaIT6/6VlS
Malware Config
Signatures
Files
-
d6e7f5f8f190daf901baa87572e6537b6e9d18d7649b8ba9475060850813316e.exe windows x86
d740c6b869dac154ef6e51097ce3173a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
TerminateThread
GetLastError
CloseHandle
VirtualFree
GetFileSize
VirtualAlloc
LeaveCriticalSection
GetCurrentThreadId
OpenFileMappingA
FlushFileBuffers
Sleep
GetProcAddress
CreateFileA
ReleaseMutex
user32
RegisterClassA
LoadAcceleratorsA
netapi32
NetDfsRemoveFtRootForced
avifil32
AVISaveOptions
AVISaveOptionsFree
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 561KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xvda Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE