Static task
static1
Behavioral task
behavioral1
Sample
e8be6bfcc1ece250bbf887a24211d85f06d45f7f121de4b91b4c2bd9177950cb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e8be6bfcc1ece250bbf887a24211d85f06d45f7f121de4b91b4c2bd9177950cb.exe
Resource
win10v2004-20220812-en
General
-
Target
e8be6bfcc1ece250bbf887a24211d85f06d45f7f121de4b91b4c2bd9177950cb
-
Size
392KB
-
MD5
56fe2b980ca2d397c353a28c38f79539
-
SHA1
bf49212f62128661916b874032956e0442098e9d
-
SHA256
e8be6bfcc1ece250bbf887a24211d85f06d45f7f121de4b91b4c2bd9177950cb
-
SHA512
d37b5f3f83a6b43a0c4d4a08e81d9a288b6fe9464354c70be0418faf005d1096be92dd819346cccaf15a6b682e40614f44d02564ff644fa81a67acd42d4513ba
-
SSDEEP
6144:EfUbfLQiYwwt55uOQhRUwob5p9IG8gxbrL9XOWHMWg:EfURwt5cOQhy7b79IGJr9L
Malware Config
Signatures
Files
-
e8be6bfcc1ece250bbf887a24211d85f06d45f7f121de4b91b4c2bd9177950cb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 249KB - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE