Static task
static1
Behavioral task
behavioral1
Sample
663REV3 AL-BEHAR -PO663.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
663REV3 AL-BEHAR -PO663.exe
Resource
win10v2004-20220812-en
General
-
Target
0646D1E464F0E5D41CB4A04C4330D7988757556354CEC5AB8E4B665C0BD8200E
-
Size
422KB
-
MD5
8e89e89c6d54bfc9466b1eb3c6e3bc84
-
SHA1
6f56a2b608497e916be7aeb174929c832e1d32fa
-
SHA256
0646d1e464f0e5d41cb4a04c4330d7988757556354cec5ab8e4b665c0bd8200e
-
SHA512
94e5325e589dfcd8ab476c185a704e766ac12a282d069797301866522239ce53a056e68629c8c0a15e777e10c1aad6692c3ffe8c868d73df63a83ff649ce0740
-
SSDEEP
6144:0IabCZaY3+Q6KIOeoxNM9wIXtbe8b3BZZ8/osvXz4RxqD3Jbib1Y4OO0tmT+:0JLkI9B5xZ+/osb/DRibyDc6
Malware Config
Signatures
Files
-
0646D1E464F0E5D41CB4A04C4330D7988757556354CEC5AB8E4B665C0BD8200E.rar
-
663REV3 AL-BEHAR -PO663.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 476KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ