Static task
static1
Behavioral task
behavioral1
Sample
reWASD640-6988.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
reWASD640-6988.exe
Resource
win10v2004-20221111-en
General
-
Target
reWASD640-6988.exe
-
Size
9.2MB
-
MD5
82553303a4428272e7596a66f7cf6fc5
-
SHA1
b3b454c62546e7d3043be04f548d552900642dd9
-
SHA256
ad091996730e743b8760a658cc97d0f7853747fb3be05ab81a2f96122e624550
-
SHA512
3dbab66d733972de8f4a2d2e10d1d56a71c0e10d871ef27caa75efba2a8eaed053a5eb647624235157393bc4725f2cb2634adbdb036b48fedcf134ce07af01d5
-
SSDEEP
196608:aKd+TvJ9A8hfFHcvGeMQ0WNrk9ayt7yhhgjp59VPIlneOEC:Td+TvJ9A8htHcviUrYn7Fjp59te8C
Malware Config
Signatures
Files
-
reWASD640-6988.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21.8MB - Virtual size: 21.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ