madTraceProcess
Static task
static1
Behavioral task
behavioral1
Sample
cebd985f383e6e5b3001ed76497bb684e6dac1afc9cc71c79ed0bbde4c4cd553.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cebd985f383e6e5b3001ed76497bb684e6dac1afc9cc71c79ed0bbde4c4cd553.exe
Resource
win10v2004-20220812-en
General
-
Target
cebd985f383e6e5b3001ed76497bb684e6dac1afc9cc71c79ed0bbde4c4cd553
-
Size
774KB
-
MD5
74c6628d16daa365ff86d3d89f6b0bf0
-
SHA1
5b2383cc32d107caa143aa07678b1f974091ca33
-
SHA256
cebd985f383e6e5b3001ed76497bb684e6dac1afc9cc71c79ed0bbde4c4cd553
-
SHA512
e0c0799ab06877b5da6720a780d341fbfec2aa4abe96c2ac46fe00409760e58193b255e47a20b9f767ab937791786d5bd0c40dad350a2de2a9e272542ca259d6
-
SSDEEP
24576:aWYlc//////QS8iIOfPOerAY29QdkU0nPEzPg:0lc//////QSrIUPOMGYkpPMI
Malware Config
Signatures
Files
-
cebd985f383e6e5b3001ed76497bb684e6dac1afc9cc71c79ed0bbde4c4cd553.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 624KB - Virtual size: 624KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 79B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 236B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ