Behavioral task
behavioral1
Sample
pay2.exe
Resource
win7-20220414-en
General
-
Target
pay2.bin
-
Size
174KB
-
MD5
4b052ae067d179b1e9626c250771002e
-
SHA1
a37c079cc492f9ebcb5fefc440db929007e3f409
-
SHA256
c4692b54a5619346cd90557fc71a3bcb9a5712d40b5e30411a87f4bec4697005
-
SHA512
ea186cfbaac1e7fbaff049c258eb3b10c6d11fb01415dc2c4e4292637cba825697e360170803338d451aa333d6c7a4e78223d8c37f73a7ab6a70b65a7e656ce2
-
SSDEEP
3072:GaunUkXzw0OOjaTWE/7u9XozTKM98H/GCETDWRYP8tZaX3+EyqZyJxi:G9Ul0Xak9XqOUWGJTyRS2Zan+/qZyJx
Malware Config
Extracted
xloader
2.8
utg6
HH9H3kXZHIk0wrXfJq4s5Q==
dJojMwcUlkY3/12Ghl4=
M97sg6hotTOvNY1D
6o+YPIQARtqPHA4sKdmWYke8FA==
Pt71lrWLDblvQJ9A
K0fU6/BseTox+kSSmYQw5NtN00EV7tXr
4sohLE0CeRrTl+2X03jpYke8FA==
zrcKky6asFs+yUeWmQ==
VodJdmzh+A==
gobc7RDsOEAw9A==
xEYVn8uhKPPkPWuJo43QVuWhzgLM
Fw9Ybr9DXRz9jnd/jXvyYke8FA==
VCyIpJ9WjQS9AUudt5mWvMjCzE4=
0a6vT2kQTs1+SYepk6NO
TGCqvhzKUAj3RWvPX/5G
h4bU7i39XUJV4szsQt9e/A==
vwqYIIH/DLW3bpeqo3HpYke8FA==
vxbocZI8hKNcZb9Moli2Yv0dHg==
7JCQHUYhm19m7lrqPADuDrOhzgLM
gJjwBFXqM6BPYIxcaVY=
WYIgwTrqZQGsZbXL+PhR
KgZciArIHaFgamqJiWNdf06wJKXE
wZTaBoYqaPCuscppu3S2YTPnXIwV7tXr
NHsMkedknR+6CS+x2N5XPQWw
S/TxBpFMlwC28DmHhDhu+LOhzgLM
T5koS4H1Nch/iJC+6Yo3TuH+CEkA/ts=
1rvxCZROuEe9DhJch18=
KaxpFKG2wPS9+VbBPUn1n0S4
JhBkc8xMWSMxNkKOy3u0w4E=
MHUGjeB2vkgOxwKUJq4s5Q==
qGZvI3kPEcKCR4nfJq4s5Q==
oIrHwQHPIaNi6XsbeDTt7Q==
yc4MEk0V3skwRjs=
mEBH0fncP79+vdfn+ObrEt8TEEkA/ts=
dZoswFAcrnokNl+MnnHsYke8FA==
5OkmQrlCTQm36+lX
ms5RddVuqiL1PmrPX/5G
47fByGIP4oh1
Tuvnd5paqRveLIxcaVY=
KQpN+Bfe8JpFTzk=
3Q+uQqhS1oBGyUeWmQ==
I8zS5FwEVuirvBWjzHu0w4E=
Xsnefbe/NLR7
ZcmcQrdFXiYYX6ZKpGpdgzcxDEkA/ts=
qQbDVdWUolIZ7gtI
r/B9q+deOEAw9A==
a+jHZXcxhQbB+UWNiEIwPtXwJVjT4NQ=
xfd2BJxuFckwRjs=
gjRJa9peOEAw9A==
AHBF3Ta66MkwRjs=
0DQPpwW1BYNNyUeWmQ==
MjRyieFfoHPB/azPX/5G
h5rUfrs2eQhvQJ9A
6JyirxST08DN2BccXWKRyMjCzE4=
/jO+R7tYrIt4/GTPX/5G
LGzpEm8Yj1tf4OxAkjhq3XNkSFEV7tXr
PNTt91DJB5tSWoxcaVY=
BHxU+jEHtja36+lX
AVnS6zey83kcKTuMzHu0w4E=
N2LwByXjYiwR3hlqnSVW4J2Z3xjV
21Qhs8VuzJ0NGCI=
CXl2DSDgqV1QkgZelaFO
BzbD3QrpOEAw9A==
oKTh9lvw8JpFTzk=
propagandefilms.com
Files
-
pay2.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ