Behavioral task
behavioral1
Sample
792c8258d9249c9d83b4e3826176fec2f966aafff88a94b633cc6bccb25b0f6d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
792c8258d9249c9d83b4e3826176fec2f966aafff88a94b633cc6bccb25b0f6d.exe
Resource
win10v2004-20220901-en
General
-
Target
792c8258d9249c9d83b4e3826176fec2f966aafff88a94b633cc6bccb25b0f6d
-
Size
45KB
-
MD5
820a03126606c2de78d9ff78439d23f0
-
SHA1
90cccc5a7b08eebc080736a46e2fb49f5918d29e
-
SHA256
792c8258d9249c9d83b4e3826176fec2f966aafff88a94b633cc6bccb25b0f6d
-
SHA512
9ae94dc56f624b599c7dcfad89e98e4e92b19a13f0510ee54b9ed7bb8081a8a504a2d58a87d9ab4fad7d826f84f2121971060dee74ec709f7705e322408fc4a7
-
SSDEEP
768:9Br+tjFY90iY6W1jwmDzKgEFQXmklMrAn38hwfOgw0clzova:jyRh31jxPEFQXmkp384bIova
Malware Config
Signatures
-
Xtremerat family
Files
-
792c8258d9249c9d83b4e3826176fec2f966aafff88a94b633cc6bccb25b0f6d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 11KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ