Static task
static1
Behavioral task
behavioral1
Sample
Nicht bestätigt 803856.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Nicht bestätigt 803856.exe
Resource
win10v2004-20220812-en
General
-
Target
Nicht bestätigt 803856.crdownload
-
Size
472KB
-
MD5
d6e2e78ca6af6d512382796090e53f4e
-
SHA1
9674ac01197b09af4361a0638858909807c17b03
-
SHA256
031a5bd02f58165beadfd84b054d893ab071980628344bc95a59a811987be535
-
SHA512
62f2be81a988dcd14903eaa9849367c786b88d12af5ff8ae74cca4449a696b9f4480e98cc9f5b6393c56a2ea3c4b236015046bd356f95fe5f3c37d9d18037070
-
SSDEEP
12288:WRRx2pjR0bzQc1ybswZrm96FKsUwBG5au0/AFzw1:m+jGbMc1ybFQ98dG7sZ1
Malware Config
Signatures
Files
-
Nicht bestätigt 803856.crdownload.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 470KB - Virtual size: 469KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ