Behavioral task
behavioral1
Sample
ef036c9a3372f1274e9660109d7dd50fb228c036c76a6572e8837eae3630133c.exe
Resource
win7-20220812-en
General
-
Target
ef036c9a3372f1274e9660109d7dd50fb228c036c76a6572e8837eae3630133c
-
Size
39KB
-
MD5
f5ac563962a1f45dc9f492e0a9275a19
-
SHA1
2981386111d07be73bf4efd7fb06c5112da5c928
-
SHA256
ef036c9a3372f1274e9660109d7dd50fb228c036c76a6572e8837eae3630133c
-
SHA512
9601d687df03e94a73ba7809852fd899ea5b3c675ba45be16332b93213e379a3182533fae567a2ec4678bf9d974ea935a783b1bc8d39e7f6fc995c19e1cf524f
-
SSDEEP
384:/waUm9XFNo4uyRDoO6ap803Kp+31ENj2oym97imAAk6tKKzCrpMDhPyzzYOCjzGf:/H79VCYvOry8imzk6TCr2yrxklPW
Malware Config
Signatures
-
Asyncrat family
Files
-
ef036c9a3372f1274e9660109d7dd50fb228c036c76a6572e8837eae3630133c.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ