Static task
static1
Behavioral task
behavioral1
Sample
c620025b213eebc5365124881aeb3ce8e7286b59b6af59d86dc56b734c3eecb9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c620025b213eebc5365124881aeb3ce8e7286b59b6af59d86dc56b734c3eecb9.exe
Resource
win10v2004-20221111-en
General
-
Target
c620025b213eebc5365124881aeb3ce8e7286b59b6af59d86dc56b734c3eecb9
-
Size
756KB
-
MD5
c2464fd709606d98882985f4c821ae04
-
SHA1
46b7ee15cb5198b191bde9a4872bc0afc70a2cca
-
SHA256
c620025b213eebc5365124881aeb3ce8e7286b59b6af59d86dc56b734c3eecb9
-
SHA512
661f0e66824f87fb2bc390877d27c34603dc9be22696ad5ded74320e66ab23fd28942d07335d52711e7aec088577b417f6f920577861af39ea4e7ed85ba96599
-
SSDEEP
12288:URn8S++U4u/n/80dW5A0zyo6JwQ5oAlK+Gu7vM8Ik8bQQ52LYRgd1yPwJR7p1J9d:Y8MU4ufxdW5A2mJr/ko7vfIk8Gk2PJ9d
Malware Config
Signatures
Files
-
c620025b213eebc5365124881aeb3ce8e7286b59b6af59d86dc56b734c3eecb9.exe windows x86
Code Sign
48:1f:55:54:8b:86:ed:e9:09:6b:49:e5:ec:7b:45:55:45:09:26:9aSigner
Actual PE Digest48:1f:55:54:8b:86:ed:e9:09:6b:49:e5:ec:7b:45:55:45:09:26:9aDigest Algorithmsha1PE Digest MatchesfalseTrustedfalseSigning CertificateNO CERTIFICATEHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mackt Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE