Static task
static1
Behavioral task
behavioral1
Sample
111.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
111.exe
Resource
win10v2004-20220812-en
General
-
Target
111.exe
-
Size
2.8MB
-
MD5
4bd543b8c82295231553065666df246c
-
SHA1
4c0911e7d0a9c1f4eb4642b554d2caf7a2f1eff4
-
SHA256
cc8375aa58734b36cd83948fc365e0274d3653643280f48e2720617b64b1ca57
-
SHA512
1bd152b179903722ba5930db981456a5b8f5d6a3fc4de5901264c8883230af6433165b6767cfa0a7a40f3c0a25346d6eb01592b788cdb8d1315a748c9ebffeae
-
SSDEEP
49152:OwKvp0ee4VckiKXZP9gBs3oLWkOxxChx:Lop0ee4Vcki+F9hGko
Malware Config
Signatures
Files
-
111.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 468KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ