Behavioral task
behavioral1
Sample
63f0f685ff7b741f2922498176cb744eafc754dcb9d6ad0b024a9422190b8162.exe
Resource
win7-20220812-en
General
-
Target
63f0f685ff7b741f2922498176cb744eafc754dcb9d6ad0b024a9422190b8162
-
Size
188KB
-
MD5
911453ab83ac7bc6ad5c7cad72ccf56d
-
SHA1
02af23ef5171345752cb14e4a3bf613b673e34a5
-
SHA256
63f0f685ff7b741f2922498176cb744eafc754dcb9d6ad0b024a9422190b8162
-
SHA512
3391f40d8761fdb426e6e6926a96ca1f0b313d6a2a4e86975acfed056576632fb5e1187c62bd6171b513168c5ce040d13e0d7bfb56ef243214b2439edf843d72
-
SSDEEP
1536:kEboMSajqT9+Ju8g+uPK9bDDpcXRigCXOcijvQE2WkzZ08rbr7fq:Nb0a68g+uPCDDOkO2E25nbr7C
Malware Config
Signatures
-
Pony family
Files
-
63f0f685ff7b741f2922498176cb744eafc754dcb9d6ad0b024a9422190b8162.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
drws0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE