Behavioral task
behavioral1
Sample
dead.exe
Resource
win7-20220414-en
General
-
Target
dead.7z
-
Size
1.3MB
-
MD5
e34a27319d3b8e1db6278e254838eb0d
-
SHA1
e131e651ed84b2bd0f339efdb5db4a95ba772ceb
-
SHA256
16aba772af1763cce32eae03538f38efb716a8ed36e81ca6a2b4da2db8dbdbae
-
SHA512
9a394bb62affd28b2077300b493bff9e41f4c4f220b5a9d6ddff5492cb54ac27f65dc327aa71c00a5788e5549c3763c548ef8065b03f02433e394a5089666f60
-
SSDEEP
24576:ekGrhdIaluQ2Ysos0NuEJfOSqYMRVA6QGQdrR5v/PjazpdMz8lW9GaUas:2Id1Ysos0gEJGdYkYG+N5v/K/lXaUas
Malware Config
Signatures
Files
-
dead.7z.7z
Password: __=infected--=
-
dead.exe.exe windows x86
Password: __=infected--=
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: - Virtual size: 982KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ