Static task
static1
Behavioral task
behavioral1
Sample
4GWlrE5lQZ3zMsb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4GWlrE5lQZ3zMsb.exe
Resource
win10v2004-20221111-en
General
-
Target
4GWlrE5lQZ3zMsb.exe
-
Size
942KB
-
MD5
56eb49cbb5d69cdc233dd004eedc1aba
-
SHA1
481422b7d7afaf0019d58e4694415f01beb93080
-
SHA256
3d56a03b999ae6e936a1524b6b59aae00273a4bcfa41497b57b1ea9d5ebadd8b
-
SHA512
c555e5a8f5d6d82a53f0f1a48a5d4eef9a06c99ebf1030d175295ac124ca41dfe30238070477767bd4fbec9b9ef741d027534723e37cd915e41860a6be28cde3
-
SSDEEP
24576:tWsn+B+hHrE9eh1U6GCBGce7w7En1gSp4TX9jW:tWwy+xrE941U0pe7w7EnOSCz
Malware Config
Signatures
Files
-
4GWlrE5lQZ3zMsb.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 870KB - Virtual size: 869KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ