Static task
static1
Behavioral task
behavioral1
Sample
1bz7KfahvU.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1bz7KfahvU.exe
Resource
win10v2004-20230220-en
General
-
Target
1bz7KfahvU.exe
-
Size
72KB
-
MD5
c7bf6e3a9b6e4cd40ba0a5176c107ad9
-
SHA1
36a6c95a624536b4c444834e1bcc8c96ce1ccceb
-
SHA256
45172a699a254401b8647b192e65c58fb3ccf1c92fbe76416203c03ece3d4519
-
SHA512
893172ebeed5d9c57ce7b3c77959c70e030f20ddc04616cb34b038dceef6e00695892d47cdf114d2f1c976a11754ee4cc6ad2d07b18b92c3387e2975e8ab1b19
-
SSDEEP
768:+jB2IVMgJHOwT181/G6cB6vg1WacpP1pRFKyt9T2E8APts837V2:mVMSjZ81/gF11oOyf2EhPxo
Malware Config
Signatures
Files
-
1bz7KfahvU.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 334KB - Virtual size: 730KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.symtab Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ