Static task
static1
Behavioral task
behavioral1
Sample
15354fb938f25d919b4565f696dfd72a22cad243ee762c0e90352feb85c7e3fc.exe
Resource
win7-20221111-en
General
-
Target
ed8ed832baf0feed4f345181d9a7c9a9.bin
-
Size
1.3MB
-
MD5
8dd0e1cb8ac53eef833e52b9a1205dac
-
SHA1
a5712f0d2806ce4d51e9bad362902995418cdf6b
-
SHA256
4da7af51dab4019be91f0ec270b5bebec6c42be5ae7d370e5633eac9e4c0eb29
-
SHA512
61e5f20a62c4424dfa24d805c3b8f8fb013d96d938c5ebc0ca46272806918fd3c65021151d9cad6c21a218065ed644e8b2bc913ebe10529676f365df1a8e28ce
-
SSDEEP
24576:uiUEfwQAZGcn18N1AVyKAFLfQBJtsTKFcDblZog2Fma7976meA7KPDMjIkDdT3wv:D7fwTZ5nsgwfUJtsT2cDblZogYmG6me5
Malware Config
Signatures
Files
-
ed8ed832baf0feed4f345181d9a7c9a9.bin.zip
Password: infected
-
15354fb938f25d919b4565f696dfd72a22cad243ee762c0e90352feb85c7e3fc.exe.exe windows x64
Password: infected
10902eddc81906c51a87c0aec40f3851
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetIconOverlayIndexA
mscoree
_CorExeMain
advapi32
RegQueryValueA
user32
PeekMessageA
kernel32
GetModuleHandleA
Sections
.pdata Size: - Virtual size: 892KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE