Behavioral task
behavioral1
Sample
62ed75b710dcad26499b9a213b4fa42f9bc02f5259e7ca699ec78c00dc9b4ecf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
62ed75b710dcad26499b9a213b4fa42f9bc02f5259e7ca699ec78c00dc9b4ecf.exe
Resource
win10v2004-20220812-en
General
-
Target
62ed75b710dcad26499b9a213b4fa42f9bc02f5259e7ca699ec78c00dc9b4ecf
-
Size
1024B
-
MD5
61c291584b55bcc4355093b3e8e814a0
-
SHA1
d3d1d623515478527d79d377d3da5ecccf203b27
-
SHA256
62ed75b710dcad26499b9a213b4fa42f9bc02f5259e7ca699ec78c00dc9b4ecf
-
SHA512
97931835dbc71e91a98afbff2819ceea47377c03f541135be051a5510508facb3cc32e4bc6680c46628bbd5a39e5ed6e4b527bed60e296989b00c9bea1f934a8
Malware Config
Extracted
metasploit
windows/shell_reverse_tcp
192.168.0.21:443
Signatures
-
Metasploit family
Files
-
62ed75b710dcad26499b9a213b4fa42f9bc02f5259e7ca699ec78c00dc9b4ecf.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE