Behavioral task
behavioral1
Sample
0x0008000000013199-82.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0x0008000000013199-82.exe
Resource
win10v2004-20220901-en
General
-
Target
0x0008000000013199-82.dat
-
Size
3.8MB
-
MD5
2bc19dd96b42cea3280eb5fe1e949b82
-
SHA1
d4daeaa890659239a848d36b34e1c5b0d150c42f
-
SHA256
6d654b2b1830638ac56fc0801f5898e61c05c6237d007e7b4d326930e38fa205
-
SHA512
e57a71956cab498c6d6bd4af448a3360ea13b749900d1e656904dfb5a7edb19f236a19bf72282bdc750f8bfb0148734083e6877afd4ad95c27616d207458dd1b
-
SSDEEP
98304:d77Pmq33rE/JDLPWZADUGer7B6iY74M/qmlwXVZ4FB:5+R/eZADUXR
Malware Config
Signatures
-
Bitrat family
Files
-
0x0008000000013199-82.dat.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 687KB - Virtual size: 686KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ