Static task
static1
Behavioral task
behavioral1
Sample
463d5d683ca55e95f8701d36543d6208fae366e065bc71fe663351450a4f8c24.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
463d5d683ca55e95f8701d36543d6208fae366e065bc71fe663351450a4f8c24.exe
Resource
win10v2004-20221111-en
General
-
Target
d7e6fd264bc937e3646de58e551a29db.bin
-
Size
4.0MB
-
MD5
ace3bf7bbd94068cc8ebec7283bedd77
-
SHA1
deefb6657d088552369af6f2aa93d8ed7ccb9830
-
SHA256
3dc16d089bcf42f7cd10147454f0f5e65d4635a1c0711a6ace296bfe696db835
-
SHA512
97349667c70c27f7b8402db95b59b46219a240f7c62c1f88e3321d98f531d9450c4db95c5f673a124c01c7098313f2aa608255b622e41ef2877feae874e1e9bd
-
SSDEEP
98304:LiVK2vcOWHhEE8eeT4mtpjdQZpVWT6/HBMkKvuJGmfC5u:Li42vdn/eeTRRopVWTeH6Dvugma5u
Malware Config
Signatures
Files
-
d7e6fd264bc937e3646de58e551a29db.bin.zip
Password: infected
-
463d5d683ca55e95f8701d36543d6208fae366e065bc71fe663351450a4f8c24.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ