Static task
static1
Behavioral task
behavioral1
Sample
VenomClient.exe
Resource
win10v2004-20230220-en
General
-
Target
VenomClient.exe
-
Size
3.7MB
-
MD5
98192e2673ebbe334213a30bde1beca7
-
SHA1
f1b9635b1b9f1c9b4b3e5410c20c434fc0547d16
-
SHA256
a3bf251467b84ebd22359e7b2c8b0d9c50fcbc035445116d596e063281872e1e
-
SHA512
46275356fead66f57e3c79a460546e05d515a353e7c61ea0a505990d916620320fd7a320e28f140b6a8faa94b40e2db195556f899bdaba1a891112057bb6fa98
-
SSDEEP
98304:abXkOKCq3dUAcvDPyK1N+HH1mAPMHE+mcgzzKIXlX+JSQuYHuOjwaWfDjxExnDYO:a7kOKCq3dUAy1NuPMk+mcgzpVX+JSQuJ
Malware Config
Signatures
Files
-
VenomClient.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ