Static task
static1
Behavioral task
behavioral1
Sample
3ae1c377ffdcc08264e9019e4f43599ddac174388fb65d50e020df8c23227467.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3ae1c377ffdcc08264e9019e4f43599ddac174388fb65d50e020df8c23227467.exe
Resource
win10v2004-20220414-en
Errors
General
-
Target
3ae1c377ffdcc08264e9019e4f43599ddac174388fb65d50e020df8c23227467
-
Size
2.8MB
-
MD5
656abe653fa0ba7c047f548743c80a99
-
SHA1
39388562936f6cb7e3d68adb279e0342ddb3ff24
-
SHA256
3ae1c377ffdcc08264e9019e4f43599ddac174388fb65d50e020df8c23227467
-
SHA512
ca0c5b91b7417fe16d67c36e0936b079a94c8ce53a9c5f050550c516f90f517acec8d4d896495e4c88201961de691991d80402e7abf2706d15d40faef501ed05
-
SSDEEP
49152:3gk6EIgk6Eagk6EIgk6Emgk6Elgk6Emgk6EIgk6EMgk6EIgk6EMgk6EMgk6Eagk:3gk61gk6ngk61gk6Lgk6Ugk6Lgk6Fgk8
Malware Config
Signatures
-
Trickbot family
Files
-
3ae1c377ffdcc08264e9019e4f43599ddac174388fb65d50e020df8c23227467.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ