Static task
static1
Behavioral task
behavioral1
Sample
29d0450f3a2a47e1590e48ba18a500af411efb5285aed716eddb778377b2e06f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
29d0450f3a2a47e1590e48ba18a500af411efb5285aed716eddb778377b2e06f.exe
Resource
win10v2004-20220812-en
General
-
Target
29d0450f3a2a47e1590e48ba18a500af411efb5285aed716eddb778377b2e06f
-
Size
1009KB
-
MD5
1eac1c6560c0ad74b1c0a29854d094d0
-
SHA1
7fb05ae51eec0c18b5f04a6e9bf538f80ef69f6f
-
SHA256
29d0450f3a2a47e1590e48ba18a500af411efb5285aed716eddb778377b2e06f
-
SHA512
652273dcaefe65970cadb4a65e4b7b97c67b74a41a426965f0437cda37ed38393aebb9d0292cd5a97922b6ef3fb1d0aa0a86f4751ae064b478791e0e4298c29e
-
SSDEEP
24576:b3i2Q+C8W5AqYDrYhi3KyAt8wJvmQ8i0UN6tHoE3T3:b3iurgzyoIHnUNI5L
Malware Config
Signatures
Files
-
29d0450f3a2a47e1590e48ba18a500af411efb5285aed716eddb778377b2e06f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 556KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 12KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lijia Size: 329KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE