Static task
static1
Behavioral task
behavioral1
Sample
4ff142466f8b2191ea96940b532d54201405c2ba9a45cc2d92841764d36e3b99.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4ff142466f8b2191ea96940b532d54201405c2ba9a45cc2d92841764d36e3b99.exe
Resource
win10v2004-20220812-en
General
-
Target
4ff142466f8b2191ea96940b532d54201405c2ba9a45cc2d92841764d36e3b99
-
Size
342KB
-
MD5
08dbd40020d5579e197cb963ae385951
-
SHA1
d17451b567e0a1877f6dacfa1c758d60e9667b6f
-
SHA256
4ff142466f8b2191ea96940b532d54201405c2ba9a45cc2d92841764d36e3b99
-
SHA512
28a473a8a0a9c0f5312753ec72805270398ad10a78faa580069b666791502920c353763cd1e46c940211c8fb1b634c7fdb0e884cf1ef587dd44c9a97fc28bb51
-
SSDEEP
6144:ARBimcQB8w9dUpqi8wIvvFFP0QcRJ6InGBOpbeCUqraNzd86ZWw:Af9pDUpqfVpcpnTkquNzd86ZWw
Malware Config
Signatures
Files
-
4ff142466f8b2191ea96940b532d54201405c2ba9a45cc2d92841764d36e3b99.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 315KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 856B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ