Static task
static1
Behavioral task
behavioral1
Sample
c22758710d9076fda9f4388e4062888a370e32fd31fb5715e80b37e34b2b1b6e.exe
Resource
win7-20221111-en
General
-
Target
094de52c848a4923be8c7b962a401ce8.bin
-
Size
1.3MB
-
MD5
74cfc886ba5d4a86b459ea777e21b4b0
-
SHA1
0494b6536d6b4914f8388607736c2018ecc0dfb3
-
SHA256
fc2a5a1d2f1939d10ecf5850a91905396e80b73692cc2f622e015c0b78a49ba9
-
SHA512
1064c9c4a340a7b9fe3f130a917cb8d97325a4ff3590957b6d3e72120a41d79f067353d911a6078a452be35a67b13684ade4dc5bdc295e6b5ab38472d5d4264e
-
SSDEEP
24576:RZaRBPEdM0s7uNGxOATzy9kpZDIIDoFwdvbO7IZJilG9jBERXLOfXmrY4Er:vEErfSWKzUI7hFkCfmVEr
Malware Config
Signatures
Files
-
094de52c848a4923be8c7b962a401ce8.bin.zip
Password: infected
-
c22758710d9076fda9f4388e4062888a370e32fd31fb5715e80b37e34b2b1b6e.exe.exe windows x64
Password: infected
bb7df0062783405bee34e08f810319d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
PathMakeUniqueName
mscoree
_CorExeMain
advapi32
GetUserNameW
user32
CharLowerW
kernel32
GetModuleHandleA
Sections
.data Size: - Virtual size: 891KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE