Static task
static1
Behavioral task
behavioral1
Sample
fd23f4cfbfd867d64b44df4ed3377130.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fd23f4cfbfd867d64b44df4ed3377130.exe
Resource
win10v2004-20221111-en
General
-
Target
fd23f4cfbfd867d64b44df4ed3377130.exe
-
Size
7.1MB
-
MD5
fd23f4cfbfd867d64b44df4ed3377130
-
SHA1
66441a013bbb22eb3bfc2023e1e95b176352b443
-
SHA256
897232e51d9d5c4348c4e972c58977816e99496063b99fdbfca16759d4a34849
-
SHA512
30a69c75ac2a85327be6189aa223f6301e0432e15bd3b09c686bb117cb2c8caea68a06d081ef0864c67d87e003b3afd94cac31bb5c94d6df074055d17efdfa8a
-
SSDEEP
49152:Xa0alchM3oc0q5Lrb/T5vO90d7HjmAFd4A64nsfJFLXXaaOJRCPRJHKByY5lClKj:23gf/H/XA4PTxbIi/QwGGkoCZ
Malware Config
Signatures
Files
-
fd23f4cfbfd867d64b44df4ed3377130.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 397KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 430B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ