Static task
static1
Behavioral task
behavioral1
Sample
95a430a2f13432e97b6f7f2d46926a1619509e2cce28a85c5e562c158189c3b2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
95a430a2f13432e97b6f7f2d46926a1619509e2cce28a85c5e562c158189c3b2.exe
Resource
win10v2004-20230220-en
General
-
Target
95a430a2f13432e97b6f7f2d46926a1619509e2cce28a85c5e562c158189c3b2
-
Size
4.8MB
-
MD5
eec3150e276d929c31abda92c72cae3e
-
SHA1
aee1d87db3019edc53803aa8798f617f87db38be
-
SHA256
95a430a2f13432e97b6f7f2d46926a1619509e2cce28a85c5e562c158189c3b2
-
SHA512
ecdd0a6cf236c53e3a12c6c7b7271d4083c24755d384bd68e9d62016f32ad9acb714382cf8ba9b2b4029aa86269df59c5e39efe03cb6716adad2a728a32be503
-
SSDEEP
49152:H+JN0DyJCk7qX+8+iA5hKfJcpMjtKgY0ZjhCkcoEqzkAZ7ofO7lmwTmgIE/7U/Gk:HsNWc0qhKfSMxKgYQoqAYE+lm8jGGBJ
Malware Config
Signatures
Files
-
95a430a2f13432e97b6f7f2d46926a1619509e2cce28a85c5e562c158189c3b2.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adata Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 997KB - Virtual size: 996KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 683KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 796B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.enigma1 Size: 116KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE