Static task
static1
Behavioral task
behavioral1
Sample
b84PVuQIuQD2g8C.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b84PVuQIuQD2g8C.exe
Resource
win10v2004-20220812-en
General
-
Target
b84PVuQIuQD2g8C.exe
-
Size
746KB
-
MD5
64011a7871abb873c822b8b99082e8ab
-
SHA1
3d463299cda11670351fb5b2c1e0c213bf7563ef
-
SHA256
a442b02412d266580b4e2bc5a4c4d548a16b5035c345e62f32f6094846e1557f
-
SHA512
277f1c221a50bd47b7043a2a80e753820fe50818f0bbd06ae5ea6cf45f12df3da3c91cb9134fe52563ad54df3b7b5d65fb965a224fb3203acac7bee4b93a38ce
-
SSDEEP
12288:7BxGcU5f3AFiAV/NpeCYdUtwd0ITYlo0L8nbezhEBn4DauUkoPO9R4kb:mcU5f3A0CUnddR0lEbYi4DJRoPOX4k
Malware Config
Signatures
Files
-
b84PVuQIuQD2g8C.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 729KB - Virtual size: 729KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ