Static task
static1
Behavioral task
behavioral1
Sample
4a792ec4274e9b79925d3937c80a27d3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4a792ec4274e9b79925d3937c80a27d3.exe
Resource
win10v2004-20220901-en
General
-
Target
4a792ec4274e9b79925d3937c80a27d3.exe
-
Size
649KB
-
MD5
4a792ec4274e9b79925d3937c80a27d3
-
SHA1
3e304d678d2b1152745cec76d553339fe79fdf9a
-
SHA256
c06613844bf5641d98c53c9536a3103b686a3123b44a147046fad162a1f164e0
-
SHA512
0bac0b9a2ee6f76328764e4769f5836adb2a317716f8cb5edf58c918823a6fe2927f94147403999098225ec6900c966c4a6bfc4a74a67a3179ece12eba2fdc48
-
SSDEEP
12288:YED/v1d7uCkGgXJEj9IPYSp/ISsWms9vk2bh7VQo/wzAI:YU/rhvgXmj96WTQrbpVQRzt
Malware Config
Signatures
Files
-
4a792ec4274e9b79925d3937c80a27d3.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 577KB - Virtual size: 577KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ