Static task
static1
Behavioral task
behavioral1
Sample
ELECTRICPLUG VIP #1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ELECTRICPLUG VIP #1.exe
Resource
win10v2004-20221111-en
General
-
Target
ELECTRICPLUG VIP #1.exe
-
Size
300KB
-
MD5
cb5eb269cc97c8e39bcc80cfcd08c447
-
SHA1
647b214622d02d3384cb9b3f824d3759b14b840b
-
SHA256
d288355d3a28a5a5678f8f2c0882ef4d100a6699eff2ee35646486b07bf2bace
-
SHA512
75683ed98d41bfb6a9aea909237c03b63c2f229a089a1111b160850ed11add9734229edecbea08193d607b5b96d07a04fb62bf4f71ceb8e90c78b5504f4c6f63
-
SSDEEP
6144:9pSef6oZsiNtmCR/WFx4d4KHph2IHjuJ6PxNq4zU:9sC6jizmCFikJhxjuYPxNK
Malware Config
Signatures
Files
-
ELECTRICPLUG VIP #1.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ