Behavioral task
behavioral1
Sample
1e7a970a056984addf9c93a3819541ac.exe
Resource
win7-20231215-en
General
-
Target
1e7a970a056984addf9c93a3819541ac
-
Size
880KB
-
MD5
1e7a970a056984addf9c93a3819541ac
-
SHA1
a8dd596af56049cf2b9c40b8fc063509f2adac8d
-
SHA256
d5f09601ed17b079f0b5adc3530af9018e58b9bdca84835b60206a90eb9713d5
-
SHA512
8f6efe048c28f87f255aa041306af82936b9fc2d75156477a1abde5de33dc837999bb2a3204ccca5603ffd4f19cf9c967258350f3e5e769d3129d3f00719718b
-
SSDEEP
12288:6TEYAsROAsrt/uxduo1jB0Y96qR4/WGdN1TEC69lew8o1y0R59Ya/5yeCANEdFaE:6wT7rC6qRMO9l18AxG4RfEveU
Malware Config
Signatures
Files
-
1e7a970a056984addf9c93a3819541ac.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eter0 Size: 439KB - Virtual size: 438KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eter1 Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ