Static task
static1
Behavioral task
behavioral1
Sample
c2856feb88f3234999a29b821fbb79cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2856feb88f3234999a29b821fbb79cd.exe
Resource
win10v2004-20220812-en
General
-
Target
c2856feb88f3234999a29b821fbb79cd.exe
-
Size
1.0MB
-
MD5
c2856feb88f3234999a29b821fbb79cd
-
SHA1
5aa1693d59cc6e4f1f1d26a0285b09d070240ad5
-
SHA256
757d8d8535c5b016cee7bfc06d19af62970a3f02011b4dc9895da38762019289
-
SHA512
87a72f5e385dbffd61c9a57edb1f3c430a979870a3475ce78932a065202d1953c2b868d52c0bed5f39169fe0e726ec6a9061e1831e06250005e675b7c775de04
-
SSDEEP
24576:Wpt/DxX2ZyrLqrPAgLKs+lM5XvsRFeye7+S+e01OzhmO:Wpt/8yHYpLKS0CRjo
Malware Config
Signatures
Files
-
c2856feb88f3234999a29b821fbb79cd.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 960KB - Virtual size: 959KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ