Static task
static1
Behavioral task
behavioral1
Sample
Starter.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Starter.exe
Resource
win10v2004-20220812-en
General
-
Target
Starter.zip
-
Size
85KB
-
MD5
7dfa7a4b78585e6840c49001055fdd7b
-
SHA1
3ca453ddae218e664a54e7cea8522892add11d21
-
SHA256
69a03b6ec905a6e32fc8dc0a04329c782c465df0ffeb61de7d2adcec4d084249
-
SHA512
260de78d87933f34a33abf4bb527a6c50a8c31405c6059b852e5ae021dd6688c5c2699f4ad6eec640fab2281dd15e2387f49fc796bbc8bcfca604d5e0a0b1b79
-
SSDEEP
1536:0XoR9WCviqDC907jnqDbeTM+AQg4GnOTHE5MIgu871l5Dfy+K5SoFy:0Y7C90fngbXjHAHSMIguq/5OzFo
Malware Config
Signatures
Files
-
Starter.zip.zip
Password: infected
-
Starter.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ