Static task
static1
Behavioral task
behavioral1
Sample
killed2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
killed2.exe
Resource
win10v2004-20221111-en
General
-
Target
27431669513eccc0b0ee3890e3127551590c9c4f313bcbbf6befdf93b528e12f.zip
-
Size
2.2MB
-
MD5
a076aa70f188fe39a5d8ff734b2f4093
-
SHA1
19186df3e428bddec51b0bd27a4e5fb5544883b5
-
SHA256
568fef5cf7a8f16e5ffeac058d87b8df550531baeaf053f82853a92419579b8f
-
SHA512
dedf464eb22f0eb356563bb16b732716f50c16b453b9ce0dd5b9fb67e6baf130de7ba7c70bc99eb74a3aca6b0c8303f156512c739585b0c2830f06963e5daaa2
-
SSDEEP
49152:xZHKa7KhDIJUTDABXzsRnnWsIbnnSAnOtdzTnUzxLQf+02fG51+A:LK6KGDQ2OzTixLUP2fG
Malware Config
Signatures
Files
-
27431669513eccc0b0ee3890e3127551590c9c4f313bcbbf6befdf93b528e12f.zip.zip
Password: infected
-
killed2.bin.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ