Static task
static1
Behavioral task
behavioral1
Sample
gre.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
gre.exe
Resource
win10v2004-20220812-en
General
-
Target
gre.exe
-
Size
12.5MB
-
MD5
f04ac9aef6451631151aea90c9a7aaf3
-
SHA1
0e92c8974a289af18c910a44918824c261a6be68
-
SHA256
9d141f6434bf3b835c636db95b6e1a0e724f5ab5ad3cda02ffb233f267a5f1cc
-
SHA512
2e039478bd0a13a6547e9c9ef407c1f672443b3072aac261a1279b4d9da35c321bd46288a8c5ff521a007b0b1133a6dd9140515cb0c79c50c4f7a44aad2fc714
-
SSDEEP
98304:y7KkTw2k9hOHvE0y2aAkXeiX4i5DFtwDDl28IbAlNG2Hph8KJu6ziYKNIu9h63qH:C7JDDl28P2un+AVRthqyVR
Malware Config
Signatures
Files
-
gre.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
Iy4#M#U( Size: 864KB - Virtual size: 863KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 11.7MB - Virtual size: 11.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ