Static task
static1
Behavioral task
behavioral1
Sample
65e79e17383e35d59287374ddbca9b7764573f10b17d64b122aa9d7d68a14e7b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
65e79e17383e35d59287374ddbca9b7764573f10b17d64b122aa9d7d68a14e7b.exe
Resource
win10v2004-20221111-en
General
-
Target
sample.bin
-
Size
6.7MB
-
MD5
b1b4cd9248283136d47025de366ff1ef
-
SHA1
746427702a032776589de5ca23eaf3fdf2cee547
-
SHA256
4569e12f2bcadbe8f2bfb045521d9f5603034172135e56ee5d44b18ccd447508
-
SHA512
18b1fc6c0d99621a736adb9eb383738d3d2bc6378fc5f933bac009f2b9524a761a2a1fb8a5b773c081b8cedac7a164ad4591f7224f0a9588cf3b8745104520d2
-
SSDEEP
98304:1LqpKiccH3lH9gOrqV887alyg5ultdwAwkM7GO1ZbQ+hWZfhnq7pquqqK:1WpKinH5u7Cl5ultS8MTqinqqK
Malware Config
Signatures
Files
-
sample.bin.zip
Password: infected
-
65e79e17383e35d59287374ddbca9b7764573f10b17d64b122aa9d7d68a14e7b.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 10.8MB - Virtual size: 10.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ