Static task
static1
Behavioral task
behavioral1
Sample
6160b2187d23cfb7e3720b73c1f92112800ceed3967baff7e2612fae3b903ad7.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6160b2187d23cfb7e3720b73c1f92112800ceed3967baff7e2612fae3b903ad7.exe
Resource
win10v2004-20230221-en
General
-
Target
6160b2187d23cfb7e3720b73c1f92112800ceed3967baff7e2612fae3b903ad7
-
Size
115KB
-
MD5
90e4d0d725b6832481c91f4349468b23
-
SHA1
fcb9496a709f61586b561765f658a8b3522364dd
-
SHA256
6160b2187d23cfb7e3720b73c1f92112800ceed3967baff7e2612fae3b903ad7
-
SHA512
952f2473813819b33518b1a1aba17fef7600a206d046b27105942d293b36f1f453b132880bf6a4118f5fdb650296147e8c2f9bcb9ef7f1986af589e1c78fb372
-
SSDEEP
3072:GKmLDwJKIuWwjA4yVcxdA5G2niO1P9HfgvSVi:NmLDCKIuXjA4yauloP
Malware Config
Signatures
Files
-
6160b2187d23cfb7e3720b73c1f92112800ceed3967baff7e2612fae3b903ad7.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 50KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE