Behavioral task
behavioral1
Sample
18e3e6c5930848f79c4881744c3da852.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
18e3e6c5930848f79c4881744c3da852.exe
Resource
win10v2004-20231201-en
General
-
Target
18e3e6c5930848f79c4881744c3da852
-
Size
521KB
-
MD5
18e3e6c5930848f79c4881744c3da852
-
SHA1
2cb2fbb144715e8878b7ef67ce58ee8a32f96836
-
SHA256
f0555d5f50b89f28fe91ec2ffeb07e61efbcc972a01e70e26a3e95bcaaf75210
-
SHA512
e86ec95d17c19c18bd643f0d41f15e2bb66d57c341158df387adc29a684fbb04d3c08448c94dd0ffea27c43e4c84de32f90852d5303ffc7c757df7eb3a0cbafc
-
SSDEEP
6144:czYiLHpGuWcmArEGluwoe7NZ9umWpj++b0OdM4A02NQ5V+g1Iindz9lyXCIwkbAy:IYijpnlrEAusk7i4AK1Iu8b8j8
Malware Config
Signatures
Files
-
18e3e6c5930848f79c4881744c3da852.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 514KB - Virtual size: 514KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ