Static task
static1
Behavioral task
behavioral1
Sample
71bee54d9c15bd0d3f04829196219583b59f9e0e181fc9dd7b6aa3a68bc7565d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
71bee54d9c15bd0d3f04829196219583b59f9e0e181fc9dd7b6aa3a68bc7565d.exe
Resource
win10v2004-20220901-en
General
-
Target
71bee54d9c15bd0d3f04829196219583b59f9e0e181fc9dd7b6aa3a68bc7565d
-
Size
707KB
-
MD5
10296f3a997bd790c01cb91b4787c872
-
SHA1
d6bd6cfe7d02978f9a2bad51a4d06d4e1eb10899
-
SHA256
71bee54d9c15bd0d3f04829196219583b59f9e0e181fc9dd7b6aa3a68bc7565d
-
SHA512
2dc4d590a9b1cc2506eb180d6799a483314d8bc4f8c873d2e139a6c434e2758958227cd32f6c4674569a4bf9bad5c88d963df90349322535e00ba5d6e19742e1
-
SSDEEP
12288:zZM4d70TZCczwKdMvtT+poSUJRrlmcOs6f8pPTlxYW8UASLm2AnMvbGClWbA:zZjd70sXIMlT+po9JzQBfwPBh8UASL+I
Malware Config
Signatures
Files
-
71bee54d9c15bd0d3f04829196219583b59f9e0e181fc9dd7b6aa3a68bc7565d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rdata Size: 4KB - Virtual size: 473KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 886KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 123KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 203KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 188KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 22B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ