Static task
static1
Behavioral task
behavioral1
Sample
stage2.bin.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
stage2.bin.dll
Resource
win10v2004-en-20220113
General
-
Target
stage2.bin
-
Size
638KB
-
MD5
47200ffbb26a2c84b32e7d4e4d719e8c
-
SHA1
aba1a3188755d27187bff4e6d674597a7b4ea63a
-
SHA256
27f4da05b6a48dcaae5d957a2db822140dfc900066083694bae12925d5b725c8
-
SHA512
ea3619ad0f590b86a0751e89013f0cf0293f42871f7246e84867435323b3d092875bff28f170cdfdbf5109af1c3ac53000ad44c51d44e2bd735ff2a4cd4bec5d
-
SSDEEP
12288:L0yyJw7jxx1nVnhHXmfdoS+rEflFnUtGA3:I3GRxvJIdoSLfl
Malware Config
Signatures
Files
-
stage2.bin.dll windows x86
Code Sign
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 303KB - Virtual size: 303KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 287KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ