Static task
static1
Behavioral task
behavioral1
Sample
3b4691ea50fd1a923dfe6d7d139be848.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3b4691ea50fd1a923dfe6d7d139be848.exe
Resource
win10v2004-20230220-en
General
-
Target
3b4691ea50fd1a923dfe6d7d139be848.exe
-
Size
3.0MB
-
MD5
3b4691ea50fd1a923dfe6d7d139be848
-
SHA1
e0c43500f79a73e649e49a6c8c71a2973c009e45
-
SHA256
54ccd5c0f8202618b382c77151ebbf26451099ab4ccb3cbde51dc68af78594e5
-
SHA512
68ca893de8ca52451345ac51e57447435c84c920935d9964e22ddad4c70a8a52dc6f8578e439bfdb8184b862383ff93c1ece5d9d46200dfad65c573f5ff980b4
-
SSDEEP
49152:es1km+UclRGJIWzC5Z32UFEUltWNyR2azTK8kBRvaFlc4ExoJkGgNwJlrH:es1MU4RPZVtWSitaFlEWDgMV
Malware Config
Signatures
Files
-
3b4691ea50fd1a923dfe6d7d139be848.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ