Behavioral task
behavioral1
Sample
5f9c2eccc067f3f4e17a9b7295545d23.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f9c2eccc067f3f4e17a9b7295545d23.exe
Resource
win10v2004-20221111-en
General
-
Target
5f9c2eccc067f3f4e17a9b7295545d23.exe
-
Size
3.6MB
-
MD5
5f9c2eccc067f3f4e17a9b7295545d23
-
SHA1
761d777d6fb18ac045b0246fa6d8dfc400b02480
-
SHA256
12a0ce124ffcfdbcaaecccabd64653060be1ed337d509d459ebde5f29e3a1c15
-
SHA512
2e0898cb2f4d090c01772226c853fcb3144674b0c61e65ed13dd53904bb319dfbee81cb307c850c50757f1f7f196360c5a6381ac57efbc591e18dc3838de95a5
-
SSDEEP
49152:H0GMTzdS7FuoqqWMaZXwVCJk7UPjoPovQcZAmkzxCK5cCii8W:UGMTD7o+1gdcCii8W
Malware Config
Signatures
-
Laplas family
Files
-
5f9c2eccc067f3f4e17a9b7295545d23.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 211KB - Virtual size: 405KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.symtab Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ