Static task
static1
Behavioral task
behavioral1
Sample
b3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b3.exe
Resource
win10v2004-20230220-en
General
-
Target
b3.exe
-
Size
778KB
-
MD5
b35dc8287f0e24bb470e3a134730db74
-
SHA1
9b2cf399dde4cafa0e62160f3f91a89cc2845ace
-
SHA256
3cacd0691978243f04148ce39e057d9eb18f569515ec32ea49f58b6a11a58313
-
SHA512
cbfee0784ff8b48953428c897fffe75125bd873e8777682f7951042afa8109affe17ed514899fc838a55bcf0e4dba660e5fcdd658a6e246f1ad7e4863a485ebd
-
SSDEEP
12288:OCwhFwzG7yr8do1bUOThoDnK3M2yc3ML+nnHYhoxCEr0jCv:OrwzGOgdo1bUOTGDnKc2r3uunHY2AEl
Malware Config
Signatures
Files
-
b3.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ