Static task
static1
Behavioral task
behavioral1
Sample
5107294.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5107294.exe
Resource
win10v2004-20220812-en
General
-
Target
5107294.exe
-
Size
502KB
-
MD5
172fdccca45827c7f08218b5578bd718
-
SHA1
98edb7ed29963b2a6ee8706a1f0f16c2a96dcf2d
-
SHA256
202f820ecf76a4eba488f21297415ee3c53756a295cf8882e9b4d0ad9bc4f004
-
SHA512
56871e70cbd6fce3ff83f5e62393b003c8ec5df333a66499f24a848636eb1e6149380099f92f7f7a09c4e79611f9a3af01543218dde3d73ad97ad4af3a6d5f66
-
SSDEEP
12288:FonpjU09OwkAFiwm5LOO9kAmsQzcISjArTCNXey0:FondnkAhMktsJEoey0
Malware Config
Signatures
Files
-
5107294.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 497KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ