Static task
static1
Behavioral task
behavioral1
Sample
5f28e537ea9f681c845e12f5fdb9684d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f28e537ea9f681c845e12f5fdb9684d.exe
Resource
win10v2004-20220812-en
General
-
Target
5f28e537ea9f681c845e12f5fdb9684d.exe
-
Size
667KB
-
MD5
5f28e537ea9f681c845e12f5fdb9684d
-
SHA1
38cee9d23f5d1e0b11ce8850e8edeca09261f7f2
-
SHA256
a62a32aaa084cf58502545836b26e682051f67065a17a3b0bc595223e4263d4f
-
SHA512
a030a25bf6520bb0d69b6cbb29260a202219f6de97131de4030a307160847903b0d4d8ec5984f6a2a25e7ccb369e716188b1bf8e5ad1a309f2139e7386d0586b
-
SSDEEP
12288:dgG+zzPAELjY7Zrp67eISK745fab5e3TEE:dT+PPh2Fp6qIL45Sb5e3J
Malware Config
Signatures
Files
-
5f28e537ea9f681c845e12f5fdb9684d.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 400KB - Virtual size: 399KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ