Static task
static1
Behavioral task
behavioral1
Sample
663REV3 AL-BEHAR -PO663.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
663REV3 AL-BEHAR -PO663.exe
Resource
win10v2004-20220812-en
General
-
Target
663REV3 AL-BEHAR -PO663.exe
-
Size
484KB
-
MD5
5e1e76f87ce16778133d0e4a07fca34d
-
SHA1
30e6735db90c52bf625db61d7399e21c2fffa524
-
SHA256
86bbdfb30d760c948d6493941fc293ac073da4e622e3385575621a5823159b64
-
SHA512
5ddf0d62a0ba8749cd6c0199ef7d6cf6e64d03e17669e5d5ab6d101f03ffd8c1ae1c48c9e1dc95c4465fe92fbd9e1b549d51e2ab529cfd255ebbeb3a603fa74a
-
SSDEEP
6144:wmxiLj6zaaw6i30sruQV/JAPtPaoHVqqBK7tWzV5thTKv4HvUvIO34coPw+:Hin6mOiSQV/WPhDBK7u7GOsAO3fp+
Malware Config
Signatures
Files
-
663REV3 AL-BEHAR -PO663.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 476KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ