Static task
static1
Behavioral task
behavioral1
Sample
ef3ec8b5df5f8d2803ff48b48b5d097450d09117189665346af1198c913a2dfa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ef3ec8b5df5f8d2803ff48b48b5d097450d09117189665346af1198c913a2dfa.exe
Resource
win10v2004-20220812-en
General
-
Target
ef3ec8b5df5f8d2803ff48b48b5d097450d09117189665346af1198c913a2dfa
-
Size
146KB
-
MD5
492f0bf8133e4793fc1e4df33ee1f8c3
-
SHA1
37429c2bb1c5040469a5e89f76bd11bb26194586
-
SHA256
ef3ec8b5df5f8d2803ff48b48b5d097450d09117189665346af1198c913a2dfa
-
SHA512
6219ddb5e628f2d68cacd2c266527110615b5e330b7cea149cdafda7a9a04302a618b6fb50a2d8517005564c47fd333b27a3ce394c1accca20e4daf18f332796
-
SSDEEP
3072:3LVoDvPd+A4WhkhXDl+i1lApwH08TdTIIIIIIIIIIIIIIIIIIfIIIIyIIIITIIID:ZopGGgbiwU8J3
Malware Config
Signatures
Files
-
ef3ec8b5df5f8d2803ff48b48b5d097450d09117189665346af1198c913a2dfa.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
..... Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ