Static task
static1
Behavioral task
behavioral1
Sample
e19f8cdf66ce27d37b8434d3a89837a7f32670a9fb5ecd1b85a75da0afde9a13.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e19f8cdf66ce27d37b8434d3a89837a7f32670a9fb5ecd1b85a75da0afde9a13.exe
Resource
win10v2004-20220812-en
General
-
Target
e19f8cdf66ce27d37b8434d3a89837a7f32670a9fb5ecd1b85a75da0afde9a13
-
Size
20KB
-
MD5
ca90edbe7daaa8e42f2a3d546bf240d3
-
SHA1
2f077634b63495042327fcea6da8e030a38fe000
-
SHA256
e19f8cdf66ce27d37b8434d3a89837a7f32670a9fb5ecd1b85a75da0afde9a13
-
SHA512
8d94de76c1f50bba0f3044e51e2dd0544b9fc604b7885e1bf6fbae6749cd402df1bea606b6a7978b25abc505ca102298c97c76df3f7fa7dfd4c3c3d467f21243
-
SSDEEP
384:2mSgb7GOukn0UcLlfCwQmaYL05IdNz4n3fuMkzSCUHjmTOAnzALQH5f:7HlkLl6wEIv1TzSCUHgc05f
Malware Config
Signatures
Files
-
e19f8cdf66ce27d37b8434d3a89837a7f32670a9fb5ecd1b85a75da0afde9a13.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tianwai Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE