Static task
static1
Behavioral task
behavioral1
Sample
b649d17a24e456e9dccb5197625c0267142e410af9d3ff046551784a1c6b5388.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b649d17a24e456e9dccb5197625c0267142e410af9d3ff046551784a1c6b5388.exe
Resource
win10v2004-20220901-en
General
-
Target
b649d17a24e456e9dccb5197625c0267142e410af9d3ff046551784a1c6b5388
-
Size
4.8MB
-
MD5
4b0332b28c2d9691b7a576cab3726787
-
SHA1
658248ed1b2bf73312f9a9357f33dc950906e632
-
SHA256
b649d17a24e456e9dccb5197625c0267142e410af9d3ff046551784a1c6b5388
-
SHA512
dfe879a09c6f2e9786f71751941210b68c9d175a3a0d597176875bdc52d5a09084d71886d0843cf727ad158da19a5600b8ec7bad882c4eeb818f1dbe3c1dfbb6
-
SSDEEP
98304:nkoq0Ivcg+tJIcKrN2TuVwxXjY46zLX+sxafdQu3ocKB/mPD3+Sa1j9Ha+ufc6p9:nkGxKrNcbUVxaQu3o1B/mPDOSg6Jjl
Malware Config
Signatures
Files
-
b649d17a24e456e9dccb5197625c0267142e410af9d3ff046551784a1c6b5388.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ