Static task
static1
Behavioral task
behavioral1
Sample
f79ca424d00124569914d6d9812b037bab6ce81458f0001db5f48b414dac421b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f79ca424d00124569914d6d9812b037bab6ce81458f0001db5f48b414dac421b.exe
Resource
win10v2004-20220812-en
General
-
Target
f79ca424d00124569914d6d9812b037bab6ce81458f0001db5f48b414dac421b
-
Size
1.5MB
-
MD5
2f798b50e68da636dd231ca85f0ec53a
-
SHA1
b4c74838b2300476b28fd2a55e56a304f2cf5ed2
-
SHA256
f79ca424d00124569914d6d9812b037bab6ce81458f0001db5f48b414dac421b
-
SHA512
d34c7c0f7d01935082c99b0487b3f7ba8334681906c134e5d3ab1f2ef64cf72f09c65dfb33fb29e32f8cf05634e4ca139f59707f81fbcc730c7e9c9e2b249ac4
-
SSDEEP
24576:M1kSWhjmc3x+0gvWLUYFtlVsx+wQ1NCQqw3QckVoCahxTObIR/5lZ5ZhvemWS1FB:SWhl+RMUYFtlOxMftBlnTOba/VlOP4
Malware Config
Signatures
Files
-
f79ca424d00124569914d6d9812b037bab6ce81458f0001db5f48b414dac421b.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ