Static task
static1
Behavioral task
behavioral1
Sample
b641f60080b0e06dd60c148a15439f78efe9b29108439f55746dc944b34138e1.exe
Resource
win7-20221111-en
General
-
Target
f33b594331618ad3b7f770722b7537d2.bin
-
Size
1.7MB
-
MD5
7866eefd67be3c111424ee3d135ddd67
-
SHA1
da8c739644c23b438cf827dbd9bc2953e2504f4b
-
SHA256
c936193d0141fa8db9c7da96c2b1e50fe8f4d8359438de5880bbb4ad159b954b
-
SHA512
ce8030e0d0e3ef4768e41c74eb895762f12cfed690f6f54b4272b6708d3a7706a2914814035489c74392d6225d95e3760cf7008a9d237b9683af7776ca5e74b3
-
SSDEEP
49152:+5rO4gj4OwPGRyr2bI40J5NKncKtPK62hOdrtXXxPtLDzjQf:+LgMF6ySbI40J5NB6PyOdrtXXxVLPjM
Malware Config
Signatures
Files
-
f33b594331618ad3b7f770722b7537d2.bin.zip
Password: infected
-
b641f60080b0e06dd60c148a15439f78efe9b29108439f55746dc944b34138e1.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ