Static task
static1
Behavioral task
behavioral1
Sample
db40a0a214d870e94f8944fda296fc57e43b6a611ffb48a6296b9796dd438063.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db40a0a214d870e94f8944fda296fc57e43b6a611ffb48a6296b9796dd438063.exe
Resource
win10v2004-20221111-en
General
-
Target
db40a0a214d870e94f8944fda296fc57e43b6a611ffb48a6296b9796dd438063
-
Size
253KB
-
MD5
5e7bcedf46dfb61e29e8e951cf3ebb01
-
SHA1
ba1a73e6308b479e5f61972a3f8bde882cc879ea
-
SHA256
db40a0a214d870e94f8944fda296fc57e43b6a611ffb48a6296b9796dd438063
-
SHA512
4123bec825d67fa4c8720483e098c23efa75c5025b1c04969b6c8a1b0f909a3a79e523e6c3e46a5f9c29c64532153c9f7f5655bc4cd14d6982d4146315514d65
-
SSDEEP
3072:8frz9+/HQLvYKTFmpTZWuetGsGMzMv69D4WrzOSsvZzkuDj3mw2/hSussb8Io+tY:orqHOYYmlIGbi9VrERLvY/h1ssb7tpm
Malware Config
Signatures
Files
-
db40a0a214d870e94f8944fda296fc57e43b6a611ffb48a6296b9796dd438063.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
f67a.tmp Size: - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Y54654GF Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DSFSDF46 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TGHGFDSR Size: 233KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BVCBGH6H Size: - Virtual size: 608B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE