Static task
static1
Behavioral task
behavioral1
Sample
b0f2d519ccae5bf1435264e0979770ce.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b0f2d519ccae5bf1435264e0979770ce.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
b0f2d519ccae5bf1435264e0979770ce.pcap
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
b0f2d519ccae5bf1435264e0979770ce.pcap
Resource
win10v2004-20220812-en
General
-
Target
samples_pcap.zip
-
Size
463KB
-
MD5
60f2ef9fc914e5700f75d2501e4e7a6f
-
SHA1
ea7853e4c182f171009db1c6e444fde040ba756c
-
SHA256
2c7e46427b42cc29ef4dd8a7d06cac805035cb8dbebed9d9e9dbbfe97310c65c
-
SHA512
a2c447615d278ae947bcc027c3364f9ee5cb894c92764aa0331a2137d9428be20c7c0d5312508a786102f59bda88337d19d8630d47912641390303a6d50c3960
-
SSDEEP
12288:JepiOepXHKCA9NkKY5MEdbs5WeFIl5O38:gAOetHKPWX5JQ5j8
Malware Config
Signatures
Files
-
samples_pcap.zip.zip
Password: infected
-
b0f2d519ccae5bf1435264e0979770ce.bin.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 592KB - Virtual size: 591KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
b0f2d519ccae5bf1435264e0979770ce.pcap