Static task
static1
Behavioral task
behavioral1
Sample
f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f.exe
Resource
win10v2004-20220812-en
General
-
Target
f.exe
-
Size
4.7MB
-
MD5
bb4a5266324a3dee6cb4b06d03f3f3e9
-
SHA1
9f08e998088faa8386928c4a4dcbca5214b4f422
-
SHA256
7dd0d8c33379f84e3e23d29340051465197735d7fc1e5debf9bf5a6b4f220484
-
SHA512
18fc7355ea1182096aac1786369e07b0828346dcb68405082089c2498fbaffce32563cb666600e6d50ea4c0810ffaa8bbbca014e4b5fd14a0c6100483885ad66
-
SSDEEP
98304:ceGLANOwhDMNyINf+e6QQeyATAWJc9KKZBFALYiTtG2W:QLANOwZMNygxQeBs9KaBFuYi
Malware Config
Signatures
Files
-
f.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ