Static task
static1
Behavioral task
behavioral1
Sample
b49bd863e812bf7409860ecc583c23fda928d8f46103ed4f0869a5164a90eefd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b49bd863e812bf7409860ecc583c23fda928d8f46103ed4f0869a5164a90eefd.exe
Resource
win10v2004-20221111-en
General
-
Target
c0dea1fe3b2a83debb570e86de4cf47d.bin
-
Size
644KB
-
MD5
b6d1dfa76ed99109ff06996d4cae18e3
-
SHA1
64ab7f82e6b991f0e212807fe125152f23ea17dc
-
SHA256
201dd728f528949b66078af5b48a7fd54f571c8be408b05c345bccf28fc98dc6
-
SHA512
9c9e83d98f75e2f00b10e85b5e4a6964c09a4603814f128d05ba3f2d39ca76651ff4f9d78fe0b1d9c9b00712adea11cc927b469a3861cc9e68a9eef0940ed28c
-
SSDEEP
12288:/W8Oj1L8iDDIBT0UG6qJ7jpmj7Kmk8UICUnHT2UCFz/n:BOj1L8Z0MujpmymyICUH6UUz/n
Malware Config
Signatures
Files
-
c0dea1fe3b2a83debb570e86de4cf47d.bin.zip
Password: infected
-
b49bd863e812bf7409860ecc583c23fda928d8f46103ed4f0869a5164a90eefd.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 675KB - Virtual size: 674KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ