Behavioral task
behavioral1
Sample
bbb59e14d1fb95dd6c24c4eab63500523ae140ccf4bacf990cbc242e72dd3522.exe
Resource
win7-20220812-en
General
-
Target
bbb59e14d1fb95dd6c24c4eab63500523ae140ccf4bacf990cbc242e72dd3522
-
Size
167KB
-
MD5
65f004e2eb6bb5ebfb655c9ba721d9ac
-
SHA1
f229d7c93b89d9d0c5417e1ea475eb77200543fa
-
SHA256
bbb59e14d1fb95dd6c24c4eab63500523ae140ccf4bacf990cbc242e72dd3522
-
SHA512
cb10ea09695c6e4685791fc0d3074f9765bc769e3a9b54047e2cc548450e31de7f7ee1d7fac5849a34d4ba0e674dfe4fa2315e1138e89c3ff81a92cd257bd987
-
SSDEEP
3072:55Pto80z+vFMCnOzS9FL9sGR2uRyR7QPMtdV6oEB+eqohr6tgyoWDscN4bL71gy:5M80mniiLU7QPersB7qIrIRoesvbPN
Malware Config
Signatures
-
Nanocore family
Files
-
bbb59e14d1fb95dd6c24c4eab63500523ae140ccf4bacf990cbc242e72dd3522.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ