Static task
static1
Behavioral task
behavioral1
Sample
b684d08ebb20d36c9c255081bb14658b48e797fcf1953492b17c24d198dbdc90.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b684d08ebb20d36c9c255081bb14658b48e797fcf1953492b17c24d198dbdc90.exe
Resource
win10v2004-20220812-en
General
-
Target
b684d08ebb20d36c9c255081bb14658b48e797fcf1953492b17c24d198dbdc90
-
Size
281KB
-
MD5
d06c8d238ed218d37dd9ed068983fe80
-
SHA1
870d81fd8af6575cc55e330a735c0f252e5e2721
-
SHA256
b684d08ebb20d36c9c255081bb14658b48e797fcf1953492b17c24d198dbdc90
-
SHA512
ecbdfcd7ca65935d8c83755fcca8f2e7acdc3dc4b650e4bd733965f30202be049c4237386b8507baed0feaae32298b7f49cf48f6e4207c87b5b0f995e788f001
-
SSDEEP
6144:HlykSuEsuSjwkH5NZn9TZEzM2dFnm30Gj5xiV22vihD:QHK5XLSMw59G36vih
Malware Config
Signatures
Files
-
b684d08ebb20d36c9c255081bb14658b48e797fcf1953492b17c24d198dbdc90.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 252KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE