Static task
static1
Behavioral task
behavioral1
Sample
F287FC4DAF859C00193899FE68EF37537D8A85EBC255C9DD0CCA65DAE3A84BAA.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
F287FC4DAF859C00193899FE68EF37537D8A85EBC255C9DD0CCA65DAE3A84BAA.exe
Resource
win10v2004-20220812-en
General
-
Target
F287FC4DAF859C00193899FE68EF37537D8A85EBC255C9DD0CCA65DAE3A84BAA.bin
-
Size
8.1MB
-
MD5
461b93703ead60878729dafa55397cc0
-
SHA1
b64dc84163b8e6a878d048b2443630e8c963df21
-
SHA256
f287fc4daf859c00193899fe68ef37537d8a85ebc255c9dd0cca65dae3a84baa
-
SHA512
c7b70ec34b572704a8f3db2220a15639f9d929e3972d04bf9b83a37ee23dfdc6ea1828266e112e9fff457dd25eb06029a7bf82fba54a6621a2ae26d6f18b6eaa
-
SSDEEP
196608:0Cz2Iifh7Xo8Fmw95jVLV8JcImPYG7vX2kU:ijm85v785mhv25
Malware Config
Signatures
Files
-
F287FC4DAF859C00193899FE68EF37537D8A85EBC255C9DD0CCA65DAE3A84BAA.bin.exe windows x64
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 3.4MB - Virtual size: 9.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 836KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 5.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jmsnslzg Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dlmuoaei Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ