Static task
static1
Behavioral task
behavioral1
Sample
c358ebcfe6bdfa5f0952e8d495802e62dc8b046812036fd6ec88e989c894cb78.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c358ebcfe6bdfa5f0952e8d495802e62dc8b046812036fd6ec88e989c894cb78.exe
Resource
win10v2004-20220812-en
General
-
Target
c358ebcfe6bdfa5f0952e8d495802e62dc8b046812036fd6ec88e989c894cb78
-
Size
10.5MB
-
MD5
f5d158e5ab478adbc6cceb70b54f93c3
-
SHA1
e4609f700ea659fdf50acf24dc3323d53eab5702
-
SHA256
c358ebcfe6bdfa5f0952e8d495802e62dc8b046812036fd6ec88e989c894cb78
-
SHA512
74d70a6a8a41e0a27b198f2e5b76258665133ebe3af54e313dcff8ffac46cb91523fc58ce41a8e0f940bc5719ccd1886dfcb3bd8bb3957b215a1a1b882cc77fc
-
SSDEEP
196608:4CWatpFndaLUhnosJ1krIFQ+YG3WJM+o4nIVYMC6Kit+:4CNtpFda4hosJ1krIGZMl4n/MC67
Malware Config
Signatures
Files
-
c358ebcfe6bdfa5f0952e8d495802e62dc8b046812036fd6ec88e989c894cb78.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 545KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: 1024B - Virtual size: 934B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 72B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ