Behavioral task
behavioral1
Sample
e1b34d64a5765a02ae949b36ec895606.exe
Resource
win7-20240221-en
General
-
Target
e1b34d64a5765a02ae949b36ec895606
-
Size
562KB
-
MD5
e1b34d64a5765a02ae949b36ec895606
-
SHA1
0e50f0f10b68149a78a1843d61b75a29930c4ddb
-
SHA256
1063342a4b01665860de63007e264aab2fc7e4399de6ce3d3146ff4ced1701e8
-
SHA512
cfe876bac1844c227de2619d09ed7deeecb20a5150affbc618152451b6728cdbca500a24025f1401038c88f74f8b2722741f077e61dc31805649635c1ff78741
-
SSDEEP
12288:9vRw11rKHESl9YELkhjXEIrsO5Cqt0w/2J8mZ4Ft:xIrKLKykjdUq0wC8me
Malware Config
Signatures
Files
-
e1b34d64a5765a02ae949b36ec895606.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 559KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ