Static task
static1
Behavioral task
behavioral1
Sample
949ada32da5613c136eb7107140afe5b78fd3f288eadcb70d7741004e68870d3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
949ada32da5613c136eb7107140afe5b78fd3f288eadcb70d7741004e68870d3.exe
Resource
win10v2004-20230220-en
General
-
Target
949ada32da5613c136eb7107140afe5b78fd3f288eadcb70d7741004e68870d3
-
Size
186KB
-
MD5
04c42bb46b0698e251a41cdf93957755
-
SHA1
ed197bddfbb5c65066f1e7dc9c2b598ebdd571f3
-
SHA256
949ada32da5613c136eb7107140afe5b78fd3f288eadcb70d7741004e68870d3
-
SHA512
7f69292d45cc80aef54a4f25e1066dfe29a6ffee870cd96271071b6048eb983e4cd426d82bb75cc97973d6c0c48f46f1aa299c29bf9ce19fa01e0215223ba437
-
SSDEEP
1536:q/xKiyRiIRGFx9kbyN+GljVIm7pGALlHV1:BiyHGFAb98X911
Malware Config
Signatures
Files
-
949ada32da5613c136eb7107140afe5b78fd3f288eadcb70d7741004e68870d3.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ