Static task
static1
Behavioral task
behavioral1
Sample
4CTIV4D0R.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4CTIV4D0R.exe
Resource
win10v2004-20230221-en
General
-
Target
4CTIV4D0R.exe
-
Size
599KB
-
MD5
d6cd45a0a32e1e0f9b3b8178d6fd3830
-
SHA1
0918b2a7cbc40d5420aa623e8ff2bd7e6714af94
-
SHA256
0d270d0f73e65ee22f85349f7c6c734e2348b149fe8eec937c4029e0496064e3
-
SHA512
9e81166d2edbed1b54c0d838c21fd04b4af4a306b9c6d2250cb3d913aed149e9457b50b2c88f9f466d202c1de2794e2f4c4e0be0fd5ddfc74c05e31804da3c0f
-
SSDEEP
12288:aH9Iqz35IKnvpMMxXb6iQUf4Gko+IUzs9NziN9BilHk2ChBDoSFesNTS6:advmKqcf4GkoHAs9Niolk/eUTS6
Malware Config
Signatures
Files
-
4CTIV4D0R.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 1004KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 545KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE