Static task
static1
Behavioral task
behavioral1
Sample
b1474a8a42554e5af75e39d29d1255fa103b7ab841f94898e7977409cb49dc37.exe
Resource
win7-20221111-en
General
-
Target
8a1a33416a75a27b75fd32400ee79ac2.bin
-
Size
1.8MB
-
MD5
edcff257790bd79c095e214299c7bde6
-
SHA1
972178da15947ed288be2840902c93f9676a02c9
-
SHA256
eba76fad3b7a67c77b5b5739b7c24b2610b02dfec1128331d5018e167d8f5dca
-
SHA512
045981b90c176f7144edbba3cea09948dae035ba769d7da391e3667a6a2a433958c1d6e8ea356855b7bc0649df74b0d4ca5f5ed453f45a052ce3f4b7cb16c1e5
-
SSDEEP
49152:FgmoiNGaQUEJ+5iAiupzzX/BBQ5w2FCYS5P3PaBYOBx:i5aQUE8iAVpzzJvY08YOn
Malware Config
Signatures
Files
-
8a1a33416a75a27b75fd32400ee79ac2.bin.zip
Password: infected
-
b1474a8a42554e5af75e39d29d1255fa103b7ab841f94898e7977409cb49dc37.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ