Behavioral task
behavioral1
Sample
75b59cf8ea7426f37e0866cebf7b90b345a3fe5d3bad925b9750eb39e1b2dbf2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
75b59cf8ea7426f37e0866cebf7b90b345a3fe5d3bad925b9750eb39e1b2dbf2.exe
Resource
win10v2004-20220812-en
General
-
Target
75b59cf8ea7426f37e0866cebf7b90b345a3fe5d3bad925b9750eb39e1b2dbf2
-
Size
69KB
-
MD5
0bc8a00c2ac069cb3d0c3d991ff715e2
-
SHA1
99cf5e7182b9fb93335129b9766893a543bf8d96
-
SHA256
75b59cf8ea7426f37e0866cebf7b90b345a3fe5d3bad925b9750eb39e1b2dbf2
-
SHA512
be5e09109e3067337c932716f176366880b888bc319cd05303407e1fb5cf6405db30d0ac62d0dd6f96aba0af2c56bc210e5a324853301c7143e15d8b5704280b
-
SSDEEP
1536:ttO1GgwUFspA/QJ4CFzp/olcH5D8gRnRnh1wKp+jc0ku8XYe6:C
Malware Config
Extracted
metasploit
encoder/shikata_ga_nai
Signatures
-
Metasploit family
Files
-
75b59cf8ea7426f37e0866cebf7b90b345a3fe5d3bad925b9750eb39e1b2dbf2.exe windows x86
8b58a51c1fff9c4a944265c1fe0fab74
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
signal
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 68B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE