Static task
static1
Behavioral task
behavioral1
Sample
e49c8ca914cce43fffbf5ebebf7166dd7ae6709e2cef861f2e870c8644ee0047.exe
Resource
win7-20221111-en
General
-
Target
e49c8ca914cce43fffbf5ebebf7166dd7ae6709e2cef861f2e870c8644ee0047
-
Size
754KB
-
MD5
c5140aef3baa6885a185cca194809f8b
-
SHA1
ab352ae0e7822236625d7479e6e7e11df0175d3b
-
SHA256
e49c8ca914cce43fffbf5ebebf7166dd7ae6709e2cef861f2e870c8644ee0047
-
SHA512
99e4c6c570a82d067e1660ff6657b2d94914dfb7717e3d2b328e883a65539457d5fab1111c49bdaf0e09609ae060ad9ca714793a53eee4e3f8b1343e2981b71f
-
SSDEEP
12288:VvQt60sTsdVAlCWnH2YwfqJL7Al0mWfB50/lm82dy9toTY7W2HRhVzCrDYkjW:xQXsDMOHWfqgNWQdv2s9toMWu/VzCXVW
Malware Config
Signatures
Files
-
e49c8ca914cce43fffbf5ebebf7166dd7ae6709e2cef861f2e870c8644ee0047.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM
Sections
Size: 390KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 301KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE