Behavioral task
behavioral1
Sample
b73092efc4daddc70f257400b6ddb4b219b893af7adc6ab164aaf756713b38cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b73092efc4daddc70f257400b6ddb4b219b893af7adc6ab164aaf756713b38cd.exe
Resource
win10v2004-20220812-en
General
-
Target
b73092efc4daddc70f257400b6ddb4b219b893af7adc6ab164aaf756713b38cd
-
Size
205KB
-
MD5
a01687f9b86d671e9a0470d856481000
-
SHA1
c8adefcc1d7fae796e01bad804b0a3019dfa169b
-
SHA256
b73092efc4daddc70f257400b6ddb4b219b893af7adc6ab164aaf756713b38cd
-
SHA512
1f7dc62f49f67fb4943c752bf37e1808851d5aac8ff96eead2b58da522c525ce3b8aebcd62b64d4ab6c826d9908d3660da3d3c498be988e2ea049b656a41b462
-
SSDEEP
3072:od+loawYgLzFosurd8uUSjaR+xIh1rK3C+n+VIeE/+:TloacLCuSjKY0rSnaIeS+
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Signatures
-
Metasploit family
Files
-
b73092efc4daddc70f257400b6ddb4b219b893af7adc6ab164aaf756713b38cd.exe windows x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.data Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
m85vv.zr Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
p2zg0zdm Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hg1otpzv Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xvxfufli Size: 204KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE