Static task
static1
Behavioral task
behavioral1
Sample
06e47a3fb5ee958414663409671d17b084450ebb73b665b5b218beff32c5df38.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
06e47a3fb5ee958414663409671d17b084450ebb73b665b5b218beff32c5df38.exe
Resource
win10v2004-20220414-en
General
-
Target
06e47a3fb5ee958414663409671d17b084450ebb73b665b5b218beff32c5df38
-
Size
4.0MB
-
MD5
dd5e7b36032fedfaa18bd02059a3bc10
-
SHA1
f4bf184ceda9830173b0196b77e13e6df57b25d5
-
SHA256
06e47a3fb5ee958414663409671d17b084450ebb73b665b5b218beff32c5df38
-
SHA512
04e7b8369057a3d49885d92cb166181f53d435c1ec0f2dae77d1d59531f13efda2c37831bb2df200f156a664edd38195cc4025490eb557a963f5da4e2b064685
-
SSDEEP
49152:WU3dZowuED4PEVcI+7LMBQ9lv8ZxzVvJ659Aup4y5EV+baB61UlMX:WALoZEp+ncZPvJM9jTEQX
Malware Config
Extracted
metasploit
windows/reverse_tcp
45.76.96.233:80
Signatures
-
Metasploit family
Files
-
06e47a3fb5ee958414663409671d17b084450ebb73b665b5b218beff32c5df38.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 189KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ