Static task
static1
Behavioral task
behavioral1
Sample
0b03124d83db6547078fb5aeb18d1348a7bdd7593b136e9d5b0e93a02c5d4c76.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
0b03124d83db6547078fb5aeb18d1348a7bdd7593b136e9d5b0e93a02c5d4c76.exe
Resource
win10v2004-20220414-en
General
-
Target
0b03124d83db6547078fb5aeb18d1348a7bdd7593b136e9d5b0e93a02c5d4c76.exe
-
Size
112KB
-
MD5
5e67ba9f3acabc82d67119bc6633f8df
-
SHA1
7183b497efd5be88b85bd23faca30d09dffb045a
-
SHA256
0b03124d83db6547078fb5aeb18d1348a7bdd7593b136e9d5b0e93a02c5d4c76
-
SHA512
a99388f3ced5897e2af2a24d7569762043618df6a54abbaf134d2198cf6c9e31aa5a6a7c07611c5d743485eb77bf4f35e44738e4c59b6479a8206838ce5d007a
-
SSDEEP
3072:KExRaX6raoCoCyz6/mqv1JR+yBtGOeheWginYq:faZ1tme+1winn
Malware Config
Extracted
azorult
http://195.245.112.115/index.php
Signatures
-
Azorult family
Files
-
0b03124d83db6547078fb5aeb18d1348a7bdd7593b136e9d5b0e93a02c5d4c76.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ