Static task
static1
Behavioral task
behavioral1
Sample
marv.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
marv.exe
Resource
win10v2004-20230220-en
General
-
Target
marv.exe
-
Size
1017KB
-
MD5
e91fe201c90f67db8fb79ae57f649b67
-
SHA1
366acf2cb64c788fd2edb2d6a29f7e89a5980bcf
-
SHA256
e40944806883dfb2d3d00dc0b5f1285e83dd6fdd4c4023117c519c77cc1e3de4
-
SHA512
80548be10951a896e7317a792b92826f7e8b348c90868520bcf0001086d2ae2090af8583c7feb005411e0316a1d186d28e26d5058901610e3acffbc5f1e482c5
-
SSDEEP
24576:EC12zVZ97CF9v0bpGGU+wjY1NHXnNxC3opk:ECAR37c980GAkLK4
Malware Config
Signatures
Files
-
marv.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 998KB - Virtual size: 997KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ