Behavioral task
behavioral1
Sample
e360c69993aeff3cece090d1ac380c5da51739c4f2a19a0870dde8541afdeb3c.exe
Resource
win7-20221111-en
General
-
Target
abe4ff36c8c3a6cb420fd3fabf0df23f.bin
-
Size
22KB
-
MD5
aed2663568a126511db9c301c34d8698
-
SHA1
f551ade9777bf30ddb77fea2c1222efaba23f9f8
-
SHA256
66ddd93605729379b6c5ac48f00cdf04bba08a188431bafd6ba0b3d4aa356e14
-
SHA512
13dbc5d70e59c798cb8a7d5315ba21addea69af9b5e6d4b64ad82c2a3d7c708ec58b9534342e5ca879f81da81c39a9ce852f46de70de10a21be608104ac03cc3
-
SSDEEP
384:mQ4qudOHRBKQAXLaL4nglmR9VaWMGH5oHZ5CjSd3M9pHMgKo9KWc0Thqn:mFquCKQAXO4n6mR9CDKud89yDonzTu
Malware Config
Signatures
-
Limerat family
Files
-
abe4ff36c8c3a6cb420fd3fabf0df23f.bin.zip
Password: infected
-
e360c69993aeff3cece090d1ac380c5da51739c4f2a19a0870dde8541afdeb3c.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ