Static task
static1
Behavioral task
behavioral1
Sample
4c4fe87f899e9afee0b90622b6b3fd56ddee862cc23f77451b3380c9d152ac35.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4c4fe87f899e9afee0b90622b6b3fd56ddee862cc23f77451b3380c9d152ac35.exe
Resource
win10v2004-20230220-en
General
-
Target
4c4fe87f899e9afee0b90622b6b3fd56ddee862cc23f77451b3380c9d152ac35
-
Size
4.2MB
-
MD5
21c8c11a269a233ee5b959b833967716
-
SHA1
fec2cdab1246c3ef2820c281b805ab46e7e5df41
-
SHA256
4c4fe87f899e9afee0b90622b6b3fd56ddee862cc23f77451b3380c9d152ac35
-
SHA512
e8b1b2fe11e2f417faba8a38a31c45fe289e173900c6520d27ade57ed35b71949f5393d2cc6bcc267ed9ea7542b9dc6d71d1f697040dfa40df746c27f228597c
-
SSDEEP
98304:Ban17Zr1+wxLwTxbRErwHYtWYMXJ17rJucWyFLOAkGkzdnEVomFHKnPu8J6H:WfwUcQK7rJumFLOyomFHKnPue6H
Malware Config
Signatures
Files
-
4c4fe87f899e9afee0b90622b6b3fd56ddee862cc23f77451b3380c9d152ac35.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 382KB - Virtual size: 381KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.enigma1 Size: 364KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE