Static task
static1
Behavioral task
behavioral1
Sample
4b849d412245437a6185de355d24799911f08df34a5c77e265c6b7222e84337a.exe
Resource
win7-20230220-en
General
-
Target
4b849d412245437a6185de355d24799911f08df34a5c77e265c6b7222e84337a
-
Size
3.1MB
-
MD5
36538f9861e330d5ac9310418f615bf9
-
SHA1
ab32322f5094133b4f75ab10d63a3705cb2064c8
-
SHA256
4b849d412245437a6185de355d24799911f08df34a5c77e265c6b7222e84337a
-
SHA512
9c79444bea20258e71e782ebbdeceb71547f5be54764088f6aba0a0062fce3f8277546bd2f294ae040804196a8e41e99d057449f73d4cbfc4d0213eaa12bdb68
-
SSDEEP
49152:8DOm/UnwYvirEus6NRwMwyfaQb+Tch+kmqk2ls0Oz4HoJ1c0TrBO8THK6aLhlLFq:8xUwiijeMLfRb+Tirdkt0O8Hybrj6HH
Malware Config
Signatures
Files
-
4b849d412245437a6185de355d24799911f08df34a5c77e265c6b7222e84337a.exe windows x64
79b3362178937bf9559741c46bb9e035
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sections
.MPRESS1 Size: 2.9MB - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE