Behavioral task
behavioral1
Sample
5cb6e7cbf010448dee566a8ecee8666c007ccf9e5cf55748f9e2542a2a0d7c04.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5cb6e7cbf010448dee566a8ecee8666c007ccf9e5cf55748f9e2542a2a0d7c04.exe
Resource
win10v2004-20220812-en
General
-
Target
5cb6e7cbf010448dee566a8ecee8666c007ccf9e5cf55748f9e2542a2a0d7c04
-
Size
77KB
-
MD5
b93440ac6f7f6c5770324d1d7dfe1700
-
SHA1
8ce7f8fe8091ae7ba11b9e27a808df579e396b4a
-
SHA256
5cb6e7cbf010448dee566a8ecee8666c007ccf9e5cf55748f9e2542a2a0d7c04
-
SHA512
49043f1feeae3eb72fe003daab26c8e537338a48d30f47c401c7be803a2aee943f832a947dc141eb82061206351f74e00952018e452adea78b93f0ddbca45487
-
SSDEEP
1536:IDdIhs9hht7bx+srVKER3Z26/i1h3XR+Mb+KR0Nc8QsSq3J:EmhCRbx+VER3z/i1h3XR+e0Nc8QsvJ
Malware Config
Extracted
metasploit
windows/shell_reverse_tcp
192.168.1.89:4444
Signatures
-
Metasploit family
Files
-
5cb6e7cbf010448dee566a8ecee8666c007ccf9e5cf55748f9e2542a2a0d7c04.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rcdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BSS Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BSS Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BSS Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE