Behavioral task
behavioral1
Sample
bin.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bin.exe
Resource
win10v2004-20220812-en
General
-
Target
bin.bin
-
Size
171KB
-
MD5
2821409ae2e6fdadc89741873bdf54c6
-
SHA1
690a3626139962c86e5b7f20e8c16a8b260ff77c
-
SHA256
5ec485835a8f8a06a50a0bd507fb2a6e6665b60cd74a93b6c4b18ef7525c80cb
-
SHA512
5ceda5509c52851b2f26a4cc2533aa8170a6818127ff8a63f8c9fd71c9823f9b18917bcb3f651cac71dcfbe392b50f0df942c933a69f1e9df5ec99e017032ab3
-
SSDEEP
3072:1ZWTfxoX0xO9QwzosWeksI9UAtEVbsTbZuuiVhRv4x+9q55uTqLFHQ/b:1ZiWX8AzoVsIKJCbZuuiVXUAq55TL+j
Malware Config
Extracted
xloader
2.6
tpix
jsbbfp2p.com
bioindonbest.com
shjgswkj.com
melaninexperience.com
businessbancomat.com
kaatsu-chiro-studio.com
simplybans.com
ncdm.xyz
assistedlivingabuse.com
stacykinglc.com
oklahomahomesbytamara.net
magneticcompany.com
forwardinchristmagazine.com
tomasarkar.com
atterwet.xyz
day70.com
charlysstore.com
homestartuganda.com
alternative-nursing.com
novamateria-vida.xyz
do-cafe.com
stocklax.com
sdracius.com
bloktopiaweb.com
angelsconsulting.info
raretipsandtricks.xyz
fullvaluetech.com
theheartoftouch.com
grindset.coffee
superandohoje.site
fishmichiganwithted.com
xthomas.cloud
ifilehippo.com
advanceddentalprosthetics.com
planaria-mf6.com
lexus-specials.com
796glenwood.info
hsbc-valid.com
polyanthaksa.com
mergecrystal.com
reelfishinchartersalabama.com
yachterpremium.com
slrzx.com
wohh.net
pactodamediocridade.com
totomirror.com
thelkit.com
franklinmerritt.com
overbroaden.com
willamak.com
monkei-poki.xyz
unidljkt.com
correaconsultant.com
rannsinghsandhu.com
manutencao.xyz
integratrucking.com
andrew-fan.com
cannongoldbk.com
bonusfeaturepodcast.com
digitalguestpost.com
rasones.com
chahal.club
luxlbp.com
sometimeshurray.com
adcompendium.com
Files
-
bin.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ