Static task
static1
Behavioral task
behavioral1
Sample
ef35e33d822baaeb66cb5252a4066c983942791668d9e9b647b20baeb77f4d32.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef35e33d822baaeb66cb5252a4066c983942791668d9e9b647b20baeb77f4d32.exe
Resource
win10v2004-20221111-en
General
-
Target
ef35e33d822baaeb66cb5252a4066c983942791668d9e9b647b20baeb77f4d32
-
Size
1.4MB
-
MD5
8ae59b0ff051551a42beeef93993131e
-
SHA1
7158fb379f65b102f472cb705d36d193fcc49d0e
-
SHA256
ef35e33d822baaeb66cb5252a4066c983942791668d9e9b647b20baeb77f4d32
-
SHA512
04dfd52ce2e006135f0676145f1ba1a2957b5525ab0e2d4cfdde9b2d9bb44e4f2a356a7479259f52eed96a58443ac9cd5e7651b5f4ea814ec04ae6b8312d3125
-
SSDEEP
24576:NpE0X9fwtFbY3CAv8hn2pXx7bsiELQ/XAD6q9XsWwULurbdQXg/h616XjMEXaI4j:Nph9IS+xyXx3sdL+Tq9Pmag/h6ITMUa7
Malware Config
Signatures
Files
-
ef35e33d822baaeb66cb5252a4066c983942791668d9e9b647b20baeb77f4d32.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.9MB
IMAGE_SCN_MEM_READ
VProtect Size: 384KB - Virtual size: 384KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 936KB - Virtual size: 944KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
VProtect Size: 112KB - Virtual size: 112KB
IMAGE_SCN_MEM_READ