Static task
static1
Behavioral task
behavioral1
Sample
1077b8e8b1042a3b67b5ee5a508e71095174ceda299f6f68f5c8872d69323c44.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1077b8e8b1042a3b67b5ee5a508e71095174ceda299f6f68f5c8872d69323c44.exe
Resource
win10v2004-20220901-en
General
-
Target
2904d42cd32ebf5f8f6dc42e64546bd1.bin
-
Size
220KB
-
MD5
cdd9584972ba376927b60c0a4c51c398
-
SHA1
db6482b48b7e7d65e61e659fc4e025e7e0aa25ee
-
SHA256
fad36de40d6525b50ce5f236a317c551ac49d044a36779f347bcb17811c20427
-
SHA512
e810fe4cb4221dfbdada244e9b9cd9f0142aecc26c081a630025d525428fd25aa7b6a7aabc26761b963d65c6b67ef64cb4adc0fae1207838a26ad5e1341d3f78
-
SSDEEP
3072:ZSRMYtlqU/OPBAxU1wEALHMkQXMHXWxyuWDa6meY77hAQJz1JqRrjWmUIaSWBfxK:ZSBlvweYGzJQ8qyJDaxAUJErjU4q5+h
Malware Config
Signatures
Files
-
2904d42cd32ebf5f8f6dc42e64546bd1.bin.zip
Password: infected
-
1077b8e8b1042a3b67b5ee5a508e71095174ceda299f6f68f5c8872d69323c44.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 210KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ