Static task
static1
Behavioral task
behavioral1
Sample
f82b97d8adb76fe9c5ff0ae6b649893721a3b213c3215a8383607e62d4692db7.exe
Resource
win7-20220812-en
General
-
Target
8aed11d1c1b2b45c076b5caeee127786.bin
-
Size
1.9MB
-
MD5
f40a8d8eae3ce8b0fd9982a403a18d6d
-
SHA1
14e7f974d42c407bd6986693340eaf45724ec2e9
-
SHA256
6442f1c85a9f85b06df8e8e08dc28a517d17c376e8c9133692e38fc9942a4161
-
SHA512
9a30771d40422ade7c0ce41aec2f14dd6df68b2306278d4fb9d3842b26bab0364f0231b9621401e18d487bc0d36c04e01adac2a5f3ad6cf3903f5ef7eb430cf0
-
SSDEEP
49152:icVQwnhp8H1OpAXRqfH/f/Q5zVBA62GVwT9u:icZb41Ow6Ya6q9u
Malware Config
Signatures
Files
-
8aed11d1c1b2b45c076b5caeee127786.bin.zip
Password: infected
-
f82b97d8adb76fe9c5ff0ae6b649893721a3b213c3215a8383607e62d4692db7.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ