Static task
static1
Behavioral task
behavioral1
Sample
ffe39f5b7e145d803572adf29d05324c1dc7806281c84e833d03870376f5ad59.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ffe39f5b7e145d803572adf29d05324c1dc7806281c84e833d03870376f5ad59.exe
Resource
win10v2004-20220812-en
General
-
Target
ffe39f5b7e145d803572adf29d05324c1dc7806281c84e833d03870376f5ad59
-
Size
716KB
-
MD5
ed03cc16d111661b97fd0d522d97dd81
-
SHA1
170a9943abaad4db210e29f61ff8cf1905fbd803
-
SHA256
ffe39f5b7e145d803572adf29d05324c1dc7806281c84e833d03870376f5ad59
-
SHA512
57cb9072c227c796a5531e2eced4632b7f789d2967d74da1e9b17241c522e9775b26d5470927f6c4d90d06d9348717580af1a7e84867c668ff49f29f8490997e
-
SSDEEP
12288:OYYDpsCQG2sRd8dGw/5AXzEUEREONTKyRd9Ewj9715lgHx/LI:tY+CQGLr8dG454oUE1TK29lR5lgHx/LI
Malware Config
Signatures
Files
-
ffe39f5b7e145d803572adf29d05324c1dc7806281c84e833d03870376f5ad59.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 617KB - Virtual size: 617KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ