Static task
static1
Behavioral task
behavioral1
Sample
1b42e2eb73a4023ceba27cc885ba98a93997e6ea8158f0dccb2dcfb03f973d6d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1b42e2eb73a4023ceba27cc885ba98a93997e6ea8158f0dccb2dcfb03f973d6d.exe
Resource
win10v2004-20220812-en
General
-
Target
1b42e2eb73a4023ceba27cc885ba98a93997e6ea8158f0dccb2dcfb03f973d6d
-
Size
220KB
-
MD5
a3aeb6fe176c6919edcc7378616c7bdd
-
SHA1
4494d001a10098776258dd75726994c7b981ad2f
-
SHA256
1b42e2eb73a4023ceba27cc885ba98a93997e6ea8158f0dccb2dcfb03f973d6d
-
SHA512
975834e0051adb69cee28b928f42d60706ab1f0a044a0a8b706eef557384bd8d61c321266e0f5f667ba434b81ea98d7a8d43a2f16389fde90b1630ed95e5280b
-
SSDEEP
6144:1eloE97Tkh7bOA0tZzPE+cS3awISjqSqZ:131g/3hI8qZ
Malware Config
Signatures
Files
-
1b42e2eb73a4023ceba27cc885ba98a93997e6ea8158f0dccb2dcfb03f973d6d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yvs Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE