Static task
static1
Behavioral task
behavioral1
Sample
5abc85ba1e9e0a50b297369de7934fcb.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5abc85ba1e9e0a50b297369de7934fcb.exe
Resource
win10v2004-20230220-en
General
-
Target
5abc85ba1e9e0a50b297369de7934fcb.exe
-
Size
661KB
-
MD5
5abc85ba1e9e0a50b297369de7934fcb
-
SHA1
df0a750be68eb5e5698027edc0ec9c2b53dc4463
-
SHA256
89d381e0837ecdb52052b1adbe6fa7bdab62040df694a24c9ef3ef52a2ba3e6a
-
SHA512
1d6f3f2df678af7d2ce82ea819644e7b65039d5eda8fee45142156634ae7891ef63bc7cda780a2d5936480538b7686dd3332a6d79289f7e9b5aa4f260fb8b859
-
SSDEEP
12288:KL/oYhyxC0JlKv3PABFnlJjMeddVlpredWze:y/Vy/Ov4DZnUd6e
Malware Config
Signatures
Files
-
5abc85ba1e9e0a50b297369de7934fcb.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 652KB - Virtual size: 652KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ