Static task
static1
Behavioral task
behavioral1
Sample
345fa2abc100ed0b8b2e970a2bba1c200371b198aea356df32a312980ca72b92.exe
Resource
win7-20221111-en
General
-
Target
2e0d1d2a01777812b819868c9faecfd2.bin
-
Size
1.8MB
-
MD5
9183076d3108f5e06341cff188b2c230
-
SHA1
a1c04b69b95ad3f34b920404de92c178cc59f40d
-
SHA256
4e98e7e0e6b066d0fa3ec44cf6e3dd5addb0e1b47636113c4644b5d5401bf685
-
SHA512
b9586798d44916966a797c5f326124ce0d90fe2aa77fdfee474c62d4f56195fca595b7c6ad2e8ad1c5ec923185ea7ca8884907c0d8eeff9c17233a231cea71e2
-
SSDEEP
49152:pK+moC0TdRqDgKAnzJYTF8X3z0CPWksz7s5:pK+moC0TfqDQzJYT2T0CPWzE5
Malware Config
Signatures
Files
-
2e0d1d2a01777812b819868c9faecfd2.bin.zip
Password: infected
-
345fa2abc100ed0b8b2e970a2bba1c200371b198aea356df32a312980ca72b92.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ