Static task
static1
Behavioral task
behavioral1
Sample
im change try 2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
im change try 2.exe
Resource
win10v2004-20230221-en
General
-
Target
im change try 2.exe
-
Size
631KB
-
MD5
7ecc889d32c2284fbe43cdf84d6d93c1
-
SHA1
cc35b47dd929656e028e0814e560e8a357ffbdc9
-
SHA256
c25b9007170cbbbc9403a35f9818c8d069a2611ae967c2667965600f254acead
-
SHA512
5f16cc11c4ae3c98be0c76975a650ab8a000c6938db6d58bb056ef7743786c2e032cf189ab14479dcd9fea443a64418328b8cd38eb1d558f1a79b828d9fb0f5e
-
SSDEEP
6144:9/7oYfSHQPWTUh4k57dNlv1K95bYA6n8Jn/TCsT/AKrn+qHj6SzVUwAcc9cxcgS:R7qTUF57dNl2Lp/Z3r+qHjHJUwABcn
Malware Config
Signatures
Files
-
im change try 2.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 552KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ