Static task
static1
Behavioral task
behavioral1
Sample
6b8c79bb8e2a5131af6c122320f1dfa0de1672f6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6b8c79bb8e2a5131af6c122320f1dfa0de1672f6.exe
Resource
win10v2004-20220901-en
General
-
Target
6b8c79bb8e2a5131af6c122320f1dfa0de1672f6
-
Size
7.5MB
-
MD5
1eb2ae579489e4c883f85747a7d2c9fa
-
SHA1
6b8c79bb8e2a5131af6c122320f1dfa0de1672f6
-
SHA256
39492736e783427a68a791ca3d17fa3bad096cda54846bbf54e53ab3bb0f2633
-
SHA512
09566ef57edb4f3e16fc6fce66f672f9fe202779e637b9ad04e8b4d9a8b54bbbfe618fffe8b3a7fc68d15ae48449675089f40260ab09396a670bd5cfe2abab6c
-
SSDEEP
98304:4w6Tks8Ip9y88/gE1k8cIjNnoeXsU11HK3rt2avguB4et/vEw4KLOqcCLj1J1cNE:47Tks8I78bkKjNnjsU11g
Malware Config
Signatures
Files
-
6b8c79bb8e2a5131af6c122320f1dfa0de1672f6.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
@hi'R Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ