Behavioral task
behavioral1
Sample
94d3e39d0d5ab3e08d69005fcfe02aa429039551e4325db80e4246f9fb3187fe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
94d3e39d0d5ab3e08d69005fcfe02aa429039551e4325db80e4246f9fb3187fe.exe
Resource
win10v2004-20221111-en
General
-
Target
94d3e39d0d5ab3e08d69005fcfe02aa429039551e4325db80e4246f9fb3187fe
-
Size
88KB
-
MD5
edd1b9dbbc4a1d2871be5eb95cfa798b
-
SHA1
19efe15e12de7508b9c900c04b1ead721b89dd85
-
SHA256
94d3e39d0d5ab3e08d69005fcfe02aa429039551e4325db80e4246f9fb3187fe
-
SHA512
e0337e345f75c1e6713572cf1afa7a9e3b633818b49eb4cd15a5fa79dcbbfb7d7d840c03facaca4d5f23b819161e702bece1c984b6f5b8eda5d0930bf8ba5e88
-
SSDEEP
1536:IqgQACHYOzQ2LsIde9RtUif3yVsFxhCcx5XZZsJ3t8CG2VGYWWEMT:IqrHbsUif3yVWxvZZsQCGMeo
Malware Config
Signatures
Files
-
94d3e39d0d5ab3e08d69005fcfe02aa429039551e4325db80e4246f9fb3187fe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE