Static task
static1
Behavioral task
behavioral1
Sample
c845def63370adf487ae8532a62b39858c6ae05dd7f75f8666a89e4d3f333b6f.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
c845def63370adf487ae8532a62b39858c6ae05dd7f75f8666a89e4d3f333b6f.exe
Resource
win10v2004-20220414-en
Errors
General
-
Target
c845def63370adf487ae8532a62b39858c6ae05dd7f75f8666a89e4d3f333b6f
-
Size
100KB
-
MD5
1a884dafb3a280a3ac4330209edf5c90
-
SHA1
fbf92d513537f6e42aff20606fd03f3e73a0d25e
-
SHA256
c845def63370adf487ae8532a62b39858c6ae05dd7f75f8666a89e4d3f333b6f
-
SHA512
45030292d1a5b7c73fbac77e80ac25e0e8faffa6d25f71d4c67e8c87ca9a6702705164771f3a7fe26737216a06cd7d66cab3635595b6f72243e9858c932482e4
-
SSDEEP
3072:oVSk8eNW2ZyKTKbxy2FBB3Z73eIRZwfJnzm:GSkBW2EKTKbxfBpZ7SfBm
Malware Config
Signatures
-
Trickbot family
Files
-
c845def63370adf487ae8532a62b39858c6ae05dd7f75f8666a89e4d3f333b6f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ