Static task
static1
Behavioral task
behavioral1
Sample
b280e71b7b7b435406d643239ab6407dff59b71a5f3bdd486280c17f1eb6387c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b280e71b7b7b435406d643239ab6407dff59b71a5f3bdd486280c17f1eb6387c.exe
Resource
win10v2004-20220901-en
General
-
Target
b280e71b7b7b435406d643239ab6407dff59b71a5f3bdd486280c17f1eb6387c
-
Size
860KB
-
MD5
a2636f2cd1588cd96b1b8442615b0000
-
SHA1
849a65bebaf88e10bfb88df2dc8cdb9a5f56d039
-
SHA256
b280e71b7b7b435406d643239ab6407dff59b71a5f3bdd486280c17f1eb6387c
-
SHA512
0f23d2e8c9b97b23e2378272d1e71fa3f58894888976f6923e32af50f4c85c15c13742185aee2ea5abf235c727f51e2a798b7f1d03a6c1506ce70ab066e68e79
-
SSDEEP
24576:LvksLWtkrPi37NzHDA6Yg5dsfoTzu3ppx9i96:LfzrPi37NzHDA6Y0dsfofEA6
Malware Config
Signatures
Files
-
b280e71b7b7b435406d643239ab6407dff59b71a5f3bdd486280c17f1eb6387c.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 575KB - Virtual size: 575KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ