Static task
static1
Behavioral task
behavioral1
Sample
c6ca192cf03f19bebd0329abffcbbd446fdf341c92041f5970b37b01ecd8bd92.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c6ca192cf03f19bebd0329abffcbbd446fdf341c92041f5970b37b01ecd8bd92.exe
Resource
win10v2004-20221111-en
General
-
Target
c6ca192cf03f19bebd0329abffcbbd446fdf341c92041f5970b37b01ecd8bd92
-
Size
850KB
-
MD5
3ac35fe89304988ab44a8ee8cf322d6d
-
SHA1
8864c51f0b64a616b72a6988bc1534c53ec93ac1
-
SHA256
c6ca192cf03f19bebd0329abffcbbd446fdf341c92041f5970b37b01ecd8bd92
-
SHA512
bbbfbff67e5b692f445c9cf609fd2cb28a5d2a2bb1dbe61fcc3d9576817a2ee63cf3477e7707c36ebd323c513e3391aa278cba3779f3b348ffbd3523a08a25b5
-
SSDEEP
12288:VDLXLYBiQ3EZNsepYHh1CfzIhTcRdzYffrSLjz890GpO+bnbIN50Ad:VDLXZ56DZczMrd0GprPg5d
Malware Config
Signatures
Files
-
c6ca192cf03f19bebd0329abffcbbd446fdf341c92041f5970b37b01ecd8bd92.exe windows x86
12cb72fbf3308a9787db139482b7d132
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetVersionExA
LoadLibraryA
GetProcAddress
ExitProcess
Sections
.text Size: 68KB - Virtual size: 171KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 61KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_TEXT_HA Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 638KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE