Static task
static1
Behavioral task
behavioral1
Sample
erer.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
erer.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
xy5.28.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
xy5.28.exe
Resource
win10v2004-20220812-en
General
-
Target
b07ab7a86e9618363ca48861e21a8227c6fcf247e95e920c528e0fab5c354fef
-
Size
67KB
-
MD5
e0d5335e05859d38cfbba1804206a767
-
SHA1
441f43273640c1aaba6e9d249073833237cb81cf
-
SHA256
b07ab7a86e9618363ca48861e21a8227c6fcf247e95e920c528e0fab5c354fef
-
SHA512
fdb1fc2392fd94d4c4008d33bc857f336eb65cdf29722331c2e22bb5058066d4fe407bf0538ac3a7f4979cd6643a346b39b30cd241190feab91daec770378730
-
SSDEEP
1536:D+TnCgoMgDmTIxxuUAKBX/PMM8QDYcw/V1l2UZvRJquHw1LcVHKoUQUr:D+rwDm0rNBX/PMMKx/Vn1ZKeu4Ujr
Malware Config
Signatures
Files
-
b07ab7a86e9618363ca48861e21a8227c6fcf247e95e920c528e0fab5c354fef.cab
-
erer.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.RIF1 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF2 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
xy5.28.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
n O0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n O1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n O2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE