Static task
static1
Behavioral task
behavioral1
Sample
f7e542f80eb5bc867ec9fdd22e7e63c76a9d0d889b3a91329d02f6958fc7ff80.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f7e542f80eb5bc867ec9fdd22e7e63c76a9d0d889b3a91329d02f6958fc7ff80.exe
Resource
win10v2004-20220812-en
General
-
Target
f7e542f80eb5bc867ec9fdd22e7e63c76a9d0d889b3a91329d02f6958fc7ff80
-
Size
2.0MB
-
MD5
daf9f4c158b7989e9943ef72ccde30c9
-
SHA1
ceb45f023691427a12e0facb75e449b9cdc6286b
-
SHA256
f7e542f80eb5bc867ec9fdd22e7e63c76a9d0d889b3a91329d02f6958fc7ff80
-
SHA512
7da10c293c1549c4f508eaa5896c01dc0977c24d10de354d5da21a09dfeaa761ca4e838befc2fb8d35f2bc037d06e5a4c7afb4cf1f0aae5886c98d22f4d15263
-
SSDEEP
49152:qq8AAAie1+0ntZttt4nLY8cia7x0U38M9Y:qq8NAE0Xttt4LYJiay4Y
Malware Config
Signatures
Files
-
f7e542f80eb5bc867ec9fdd22e7e63c76a9d0d889b3a91329d02f6958fc7ff80.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 429KB - Virtual size: 429KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 330KB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VProtect Size: 352KB - Virtual size: 356KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ