madTraceProcess
Static task
static1
Behavioral task
behavioral1
Sample
aff841b18d4743461cb766d4322a0b524b0a2410a5ee32712b14eccd4a1f4fd4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aff841b18d4743461cb766d4322a0b524b0a2410a5ee32712b14eccd4a1f4fd4.exe
Resource
win10v2004-20220812-en
General
-
Target
aff841b18d4743461cb766d4322a0b524b0a2410a5ee32712b14eccd4a1f4fd4
-
Size
16.5MB
-
MD5
da1b8805d2dde91054d4af182c1007d7
-
SHA1
198f70c497739ad144bb192e4769103c75948ec9
-
SHA256
aff841b18d4743461cb766d4322a0b524b0a2410a5ee32712b14eccd4a1f4fd4
-
SHA512
749c333bd8928be6e9254d6e951f05f48b1273ac2cf45b595111715b6481a4121b580e4ab52985bf3f89e173a5f9010d509233c97b094f02eb547799a69687a7
-
SSDEEP
393216:oDDxKbp/ntteKoSWDs0qWB2WuUUBWE1EIlpgj0Kx7:KmpE2pVKJ
Malware Config
Signatures
Files
-
aff841b18d4743461cb766d4322a0b524b0a2410a5ee32712b14eccd4a1f4fd4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 59KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 79B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 560B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 313KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10.2MB - Virtual size: 10.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ