Static task
static1
Behavioral task
behavioral1
Sample
0a5b5e399d9170f9d12e6484520fd949.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0a5b5e399d9170f9d12e6484520fd949.exe
Resource
win10v2004-20220812-en
General
-
Target
0a5b5e399d9170f9d12e6484520fd949.exe
-
Size
809KB
-
MD5
0a5b5e399d9170f9d12e6484520fd949
-
SHA1
29dbb238bed2961c69c0e80fc0bdb5ffeabb8957
-
SHA256
7f0071eb48f2e10a0dde679a31ba5922e74857d84bd5a05ea92a841944e9c65a
-
SHA512
ca343a1da97f6573469ce3697a18070394b750a81e4023c4c300232c275734e3c13d402e16589ba92c4716ff21baca5987a36c3dd23394f24142501526869200
-
SSDEEP
12288:+Qb7iB5OB9uJPaZgRxR4PJnT2Z1qMdVorLb355w3z5LErqkbTum14:V3iUu9aOx4PNyZ1qGorX3g39KVy
Malware Config
Signatures
Files
-
0a5b5e399d9170f9d12e6484520fd949.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 800KB - Virtual size: 799KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ