Static task
static1
Behavioral task
behavioral1
Sample
server.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
server.exe
Resource
win10v2004-20221111-en
General
-
Target
53149dc223753d8e1a56d07d30790b0a9326bb402bc7a5c8f0f6a11aa3e88b48
-
Size
592KB
-
MD5
b3bd133a4a7ff677d8e77114192780ed
-
SHA1
59beb35aabcbb6f840ab07679b747fa0b266323c
-
SHA256
53149dc223753d8e1a56d07d30790b0a9326bb402bc7a5c8f0f6a11aa3e88b48
-
SHA512
4ac7451d018962c1ba7b3da9a585c091e75c70859ecadb32078fffedcf48053ce154e8076d95d385f83c80d4b89c7be4f7da9f0038182dd2f112d180b2a9b0b9
-
SSDEEP
12288:D+PXgGqulsbV5c8P2QUigN4L90e1lLus5Z+lYE2BsAXLKE7KO0Zn9YE2+HL9:2XjlWpXPFCUieVylgsAXLKE7ve9rbL9
Malware Config
Signatures
Files
-
53149dc223753d8e1a56d07d30790b0a9326bb402bc7a5c8f0f6a11aa3e88b48.cab
-
FAROJP~1.JPG.jpg
-
server.exe.exe windows x86
28c6ef1128d2dc0d513ddf64919b7716
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ