Static task
static1
Behavioral task
behavioral1
Sample
b3989d4d8c74144725c3d7c22a42e7e54b8b83e6136521ddcf2b0e5826742611.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b3989d4d8c74144725c3d7c22a42e7e54b8b83e6136521ddcf2b0e5826742611.exe
Resource
win10v2004-20221111-en
General
-
Target
b3989d4d8c74144725c3d7c22a42e7e54b8b83e6136521ddcf2b0e5826742611
-
Size
407KB
-
MD5
e897d70e9c880ebaac3f794f5f37aa3a
-
SHA1
8f0f367d7c42ed11ee15be541e33b402a138927e
-
SHA256
b3989d4d8c74144725c3d7c22a42e7e54b8b83e6136521ddcf2b0e5826742611
-
SHA512
c573e11551f9c07c5d320c2da67ef9271fdc9a8b8247effa8b61c02e9a483b39fa829341b77f86af386e00bfe615c76b18756ccd86d0accab0cee37e01a58310
-
SSDEEP
12288:al8hZxhqYTgg/AuMLyo7/3J2/FFxzO02Pl286e:al8JhgUAuML16WPl2M
Malware Config
Signatures
Files
-
b3989d4d8c74144725c3d7c22a42e7e54b8b83e6136521ddcf2b0e5826742611.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 299KB - Virtual size: 298KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ