Static task
static1
Behavioral task
behavioral1
Sample
799d402388bf0c648c80f94917876b56bf74e08d7a270c29da5333932b09b416.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
799d402388bf0c648c80f94917876b56bf74e08d7a270c29da5333932b09b416.exe
Resource
win10v2004-20220901-en
General
-
Target
799d402388bf0c648c80f94917876b56bf74e08d7a270c29da5333932b09b416
-
Size
547KB
-
MD5
c17b83e601be5d88b2c4c848229842e2
-
SHA1
05587bef2375e529c43dae75d9e4175d416252ea
-
SHA256
799d402388bf0c648c80f94917876b56bf74e08d7a270c29da5333932b09b416
-
SHA512
d416c9f3045c2d11228654ec968a88269943ba50872afd8f2bbbf39a406973811222dd7f686e1e98b365ccebd6ecc5ca4dc2d1c8c637dfb4a865c0fbd471cdcb
-
SSDEEP
12288:yh1Lk70TnvjcJraB4aQCvh8BbjA0aIWSEM34LDNFvbxdA3rO7:Gk70TrcJraBjvCkxC34FlNdA3S7
Malware Config
Signatures
Files
-
799d402388bf0c648c80f94917876b56bf74e08d7a270c29da5333932b09b416.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 166KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 411KB - Virtual size: 410KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ