Static task
static1
Behavioral task
behavioral1
Sample
software-update.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
software-update.exe
Resource
win10v2004-20221111-en
General
-
Target
software-update.exe
-
Size
14KB
-
MD5
828e5b964cc27a496bac981014125eef
-
SHA1
dcffba869a1cc82dc1a5aae275bb2e97b6a51e22
-
SHA256
510dab7c88b5947a7c409630e76c54fa12470586dc79c9f69364d73f1bf30678
-
SHA512
040321ca0b41615e18f253a46a7c2fb5ffde6791cdc0de4b687a674381d7e129999334352dcc580866156adae0c5f95679b923bce940547988539c6ef5e0bf17
-
SSDEEP
384:mVD2qHu5tBT1L+tyo0C+DGoYXVlSqKHb:mVyqHibJ+tyo0C+N6Vfa
Malware Config
Signatures
Files
-
software-update.exe.exe windows x86
Password: bossy
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ