Static task
static1
Behavioral task
behavioral1
Sample
GES39704.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
GES39704.exe
Resource
win10v2004-20220414-en
General
-
Target
f3cceaade073909138c4e002218ba66cd00afc7d6077ed44a632f7d98a7ac2ad
-
Size
753KB
-
MD5
5bcae9f9d866d06657d5f640b57eec86
-
SHA1
e0d8b449f3a3ed8fbe84538eed930b5bce15a389
-
SHA256
f3cceaade073909138c4e002218ba66cd00afc7d6077ed44a632f7d98a7ac2ad
-
SHA512
72e872427fa7158d442d6e7eabd41b48c99c72963f9fecf156337629c861b27af34c1dffeaae16b6cb23a28d7770685d444e2c1d22332ff445d4ecf0e1c14d02
-
SSDEEP
12288:TMG2uSsR8nxeA1u7MlkZog+fmNUxHxbCsHyW+GSXmPSLzmeFdZAINCDq+aZE8WD2:oG2JsR847U9ghN+XyISXmPSfmeLZLElA
Malware Config
Signatures
Files
-
f3cceaade073909138c4e002218ba66cd00afc7d6077ed44a632f7d98a7ac2ad.rar
-
GES39704.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 801KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ