Static task
static1
Behavioral task
behavioral1
Sample
b7.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b7.exe
Resource
win10v2004-20230220-en
General
-
Target
b7.exe
-
Size
10.7MB
-
MD5
b7e18c2bd28b183d183056206617b0fe
-
SHA1
91972f42781f096d6b693d65129a71be54971c86
-
SHA256
f15f09320b4f6645a3d46709b4d1eb9f5326d863e46483d61b4488df18065ae7
-
SHA512
dcb1b0b6770f0f415fe8ea4e1c563fbf0d85caf8eb4da8a9f1b6712526783769ca39e080af91d24d6e30a44fe393a76bff8106ef0f7aa94fb80b121dd10ad74f
-
SSDEEP
196608:9j4EX/KRRxzaQe/LrhSZ8Phpe1QPnxai6NOffLHQD8o7s6kb5tGNIOY:9j4w/kU3hKkhpgQPnx36Af7070vGGB
Malware Config
Signatures
Files
-
b7.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
{e//8 Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ