Static task
static1
Behavioral task
behavioral1
Sample
rItemslisted.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rItemslisted.exe
Resource
win10v2004-20230220-en
General
-
Target
rItemslisted.exe
-
Size
752KB
-
MD5
9fe4e403601b4df553a68bf19fd0e0c2
-
SHA1
efb18b5ca2303e598d12812a9eee4039e82beb64
-
SHA256
482953f96f0db3e206fa46a9f11784000f9a22455e4131d8aff907a96e750dda
-
SHA512
a42c429bc40c4d247bc00f22a8381f327e4f40fd3ab7cccc4bf2a54f1fb3df7aab84fa84f08b122b79949b540def8d3383dbfa45ee0d05bd1b2727515105d15e
-
SSDEEP
12288:R02iNI3CsJko7JX6xfWo/H06ApG9+QT4NsOMyKWGkeXo5qmaGLs9TwUQSDunvgnf:R014HKo7JqfFzF9+Y4kyLGFXhmaGL6Ph
Malware Config
Signatures
Files
-
rItemslisted.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 566KB - Virtual size: 566KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ