Static task
static1
Behavioral task
behavioral1
Sample
ef53963afa99e4a61f7978e66cd6343895bb6c4a5368a94b7d9fe6ad67e4eb96.exe
Resource
win7-20221111-en
General
-
Target
a6ab04cca14aece0c6368c194baf661c.bin
-
Size
2.0MB
-
MD5
754b488c4f25a70f5a206adf1383ab2a
-
SHA1
9276d7c267dee6d5ece3ed25cf0c3ac75d220b5f
-
SHA256
dda824165a0edeb816599eff41e2f7a7f39398f960bf0a4ccc67836f45bf30eb
-
SHA512
1f7b6675db253d0018a3a98d695f8beb64308d6e77a7e8edd432577b40f87a5d9635bebdab84d7e9e61990f6e4579a43e6d1ccda7ba16b288e12dba93eac0e5f
-
SSDEEP
49152:uvCKj6xl4MWOQgkCaPVBOv+SkyRbxpoSBndhgf6Yhxm:9W6D47OeHVSHNpZndhgf3hxm
Malware Config
Signatures
Files
-
a6ab04cca14aece0c6368c194baf661c.bin.zip
Password: infected
-
ef53963afa99e4a61f7978e66cd6343895bb6c4a5368a94b7d9fe6ad67e4eb96.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ