Static task
static1
Behavioral task
behavioral1
Sample
6649c5d7aad5f9190ce0704d426d6d143514a76e355d28def69ba6ca7d63e42c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6649c5d7aad5f9190ce0704d426d6d143514a76e355d28def69ba6ca7d63e42c.exe
Resource
win10v2004-20221111-en
General
-
Target
6649c5d7aad5f9190ce0704d426d6d143514a76e355d28def69ba6ca7d63e42c
-
Size
59KB
-
MD5
99b6bb8d5b78aa7dedbb897729f77a0f
-
SHA1
c2c7add64784c1c089f9f60707f999d324c59a65
-
SHA256
6649c5d7aad5f9190ce0704d426d6d143514a76e355d28def69ba6ca7d63e42c
-
SHA512
17b7cde3f11164e3540afcab4f3e3243d222a8143c188608022ea34d95c2bb6737b812c5740e16d712e0fb440c8e654296cdc25290e67a73ece3108264e84668
-
SSDEEP
1536:EDpPPPPPfQ0ZoIlAHkZEyrPaaTO+hXpb34lTfayRgM4QOpv//AvZ7f:EiooQAEZEy+YhXpb32faugF//uNf
Malware Config
Signatures
Files
-
6649c5d7aad5f9190ce0704d426d6d143514a76e355d28def69ba6ca7d63e42c.exe windows x86
c5c70d06ed73206b407de00f24fd96b7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ConnectNamedPipe
CreateFileA
CreateNamedPipeA
CreateThread
DisconnectNamedPipe
ExitThread
FlushFileBuffers
GetExitCodeThread
GetModuleHandleA
ReadFile
SetUnhandledExceptionFilter
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjects
WriteFile
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 534B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vyydomg Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE