Static task
static1
Behavioral task
behavioral1
Sample
f6f45a64c1ed40bd777fc98500b414a653c3b296f20b1116bf1dc3422d875479.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f6f45a64c1ed40bd777fc98500b414a653c3b296f20b1116bf1dc3422d875479.exe
Resource
win10v2004-20221111-en
General
-
Target
f6f45a64c1ed40bd777fc98500b414a653c3b296f20b1116bf1dc3422d875479
-
Size
53KB
-
MD5
30b4d1fc17ea77fb2d09b991d20dbffb
-
SHA1
d3ac30901ae1f7b1e0bf1a1a9cbd0119e86288a1
-
SHA256
f6f45a64c1ed40bd777fc98500b414a653c3b296f20b1116bf1dc3422d875479
-
SHA512
928d5544ad64d394054e4a79b3704d914593b27a36f186f4912bd0a3fe1822948de975cb779620408c0b5d9d640af30b3f604fb05d5383918354b33806f70e52
-
SSDEEP
384:m1abd1gRSQMN6n3zNy/9eK3Tq0oaf2plszdfNwn8D:m1a5KUQMS3zNy/9d3safU4FgO
Malware Config
Signatures
Files
-
f6f45a64c1ed40bd777fc98500b414a653c3b296f20b1116bf1dc3422d875479.exe windows x86
8542f0f1df6e8e28564b727b80b03340
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ZwDuplicateObject
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 96B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 128B - Virtual size: 128B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 32B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ