Static task
static1
Behavioral task
behavioral1
Sample
37c3a08ff0ddb107364e3812f89871fae000fd5736ce401bf4a8d172554c5d5a.exe
Resource
win7-20221111-en
General
-
Target
796ef2c9492e1e960e6c726e0832663a.bin
-
Size
1.9MB
-
MD5
58a004fd58a05cdaaef536adc0d1f994
-
SHA1
01cfdb7bef018f724a7bc63294d35a8af6aa5e18
-
SHA256
8954d9ad4f07318c14e2fc3ddb6c900dfea5044f776e70b9ee0bb0b89c1aa8d5
-
SHA512
2cb3b2cbf671a806e67bf512ec96580c79ffa4cbc1d780f52b1577780673e1b662d5af65e921e1f6e6ea206ed092ea4b3b1c4b3e9e4bdda3d852e5fdc35b969f
-
SSDEEP
49152:kwDKIrXF9d/sB+WI0AbpJ6XhbXhBspSzoBtukP3EmQJIColSU:52uXF9d/HW9AbpJ6RbXXs+oP3kolSU
Malware Config
Signatures
Files
-
796ef2c9492e1e960e6c726e0832663a.bin.zip
Password: infected
-
37c3a08ff0ddb107364e3812f89871fae000fd5736ce401bf4a8d172554c5d5a.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ