Static task
static1
Behavioral task
behavioral1
Sample
6983cc86a386c04a383cfbeaaf06f97364fe43d42ecfdbba9aab98750fa2f472.exe
Resource
win7-20220901-en
General
-
Target
aedba986bcb83f9b30167c344e42005a.bin
-
Size
1.7MB
-
MD5
7081a923ef813eca02c18f3e8d262e0b
-
SHA1
d1f4ebb34e78a1d885e7b98fd76dc736bdea12d3
-
SHA256
3d7711a9cc14e18b3841c0198cb382dcce91e8d14fd28e0cf3febc6fd7171ee9
-
SHA512
731116c69a4de4444b315cc9e5af0cf382d4c652a8546265eef1a121f6ef1093b4d5b0c80f051e89976a4ed37164ff25ddd736976c25014ba1247169b693a8b8
-
SSDEEP
49152:waltHF/lRfmO8ubZT1sofmW1p79vtp+xSziiZf:wkxF/lRO6rsoT7l+iZf
Malware Config
Signatures
Files
-
aedba986bcb83f9b30167c344e42005a.bin.zip
Password: infected
-
6983cc86a386c04a383cfbeaaf06f97364fe43d42ecfdbba9aab98750fa2f472.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ