Behavioral task
behavioral1
Sample
19b72589e93e2275cbed9f2b4a55c6c23f82683dd7a7f67684e53a6e44a9d513.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
19b72589e93e2275cbed9f2b4a55c6c23f82683dd7a7f67684e53a6e44a9d513.exe
Resource
win10v2004-20220812-en
General
-
Target
19b72589e93e2275cbed9f2b4a55c6c23f82683dd7a7f67684e53a6e44a9d513
-
Size
192KB
-
MD5
319dde4b4d6f83b53384179705a33190
-
SHA1
a1dc0ae655175018048786ba78f50ca55a5a4326
-
SHA256
19b72589e93e2275cbed9f2b4a55c6c23f82683dd7a7f67684e53a6e44a9d513
-
SHA512
07de7002e09c6f314a7f1113b573b072ef5486abea8b1db842da109cfc4dc9f5da434f0f660de3c3c09add13e813904e759def315e5169ee92ee1832b5c05283
-
SSDEEP
3072:7OrerAgXWMI6vKoTN6p0frxJLgf7nDVF6PUp1Yo3ICgxK:7WDcRgNpex5gfzDVlVXg4
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Extracted
metasploit
windows/shell_reverse_tcp
192.168.1.21:1337
Signatures
-
Metasploit family
Files
-
19b72589e93e2275cbed9f2b4a55c6c23f82683dd7a7f67684e53a6e44a9d513.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
����� Size: - Virtual size:
�2���� Size: - Virtual size:
����� Size: - Virtual size:
����� Size: - Virtual size:
����� Size: - Virtual size:
����� Size: - Virtual size:
IMAGE_SCN_CNT_UNINITIALIZED_DATA
Size: 4KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ