Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win10-20230220-es
Behavioral task
behavioral2
Sample
file.exe
Resource
win7-20230220-es
Behavioral task
behavioral3
Sample
file.exe
Resource
win10v2004-20230220-es
General
-
Target
file.exe
-
Size
1.4MB
-
MD5
c5782d20b438b41c821143f7adde9e48
-
SHA1
c3d6379a260f12f1f3793215661b1e3e0a23c35b
-
SHA256
2b21edfa78f4c544fc6f35a934a792ff13e1bd05843ffacc04806fe3f0258b5a
-
SHA512
e59a9c6020202fbb9c945ca6cd926cd8cf09345db596ad7e3bb8ed2c8cb237ed79c158d27b08de91678a27c6d2c2b1dc7641e321fda49dfb23d95f635496ac37
-
SSDEEP
24576:Bq8VpMuKFBg4PiDNcGJSkRZmv+o1+eEy27mt3AF:BTVHNcG4J
Malware Config
Signatures
Files
-
file.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ