Static task
static1
Behavioral task
behavioral1
Sample
6f4e5501aa6f3d3c5bf37c2e0362122bb87f6d448b76ad2279b97d9be7d91efd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6f4e5501aa6f3d3c5bf37c2e0362122bb87f6d448b76ad2279b97d9be7d91efd.exe
Resource
win10v2004-20221111-en
General
-
Target
6f4e5501aa6f3d3c5bf37c2e0362122bb87f6d448b76ad2279b97d9be7d91efd
-
Size
176KB
-
MD5
29450842dc590f7a3ca7e0f66aa92950
-
SHA1
f295a974fdedfed2d262d876986212d26cc11221
-
SHA256
6f4e5501aa6f3d3c5bf37c2e0362122bb87f6d448b76ad2279b97d9be7d91efd
-
SHA512
ff6711cbde3b095cb46abcc4897cdd071176f7f7118d79a704e3fc042a2c8ae39e308d2e55639c5fea8b84cfb98bc208c4fdf7946c3a20df719904011bceade3
-
SSDEEP
1536:/OgwPUpfWEMAAF6OpCzdq1QRBfsBttl+EQlE/RT6M0ypaDaCF1MYZ9g03mR0:wWvvOqq1QRaXl+VEJZ0dMYZx3mm
Malware Config
Signatures
Files
-
6f4e5501aa6f3d3c5bf37c2e0362122bb87f6d448b76ad2279b97d9be7d91efd.exe windows x86
b42e087d13987ad5e4693bd53b054e33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
lstrcmpiA
GetLastError
GetCurrentProcess
LoadLibraryA
lstrcatA
GetProcAddress
GetTickCount
ExitProcess
CreateMutexA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
msvcrt
??2@YAPAXI@Z
Sections
nnno0 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 686B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ