Static task
static1
Behavioral task
behavioral1
Sample
ac1585ecff0d275e852f9d35792879bda062537ae12267306108d55873987e90.exe
Resource
win7-20220901-en
General
-
Target
04463334a6eae4cd5aa2e41bd17e3b25.bin
-
Size
1.2MB
-
MD5
417afe85deb01208a9bc0776655b94c6
-
SHA1
ddfd5629ac3c519c4da345639e67d60fb713b756
-
SHA256
ac81e8eca9a4b0b7fad900a469682e16981c69732551dfa9b3c026a0f6bbf80c
-
SHA512
dd544a58a431558abec81c4aa5723a9e7ab6e6a54a46279848aa47a5127548a5181d0f0db29497bb432883bf8a110d64d27985a98438a8ce7de135c9b6d24842
-
SSDEEP
24576:oFFNiBWUwrWNN+7YD+8aHx8Lhe7kNXTty+7z9xa5UUFf4v9XHGN:y8shqNRDNaHxeV40z9AUK4lWN
Malware Config
Signatures
Files
-
04463334a6eae4cd5aa2e41bd17e3b25.bin.zip
Password: infected
-
ac1585ecff0d275e852f9d35792879bda062537ae12267306108d55873987e90.exe.exe windows x64
Password: infected
51e382311de459f3f586008d034ada3a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
DragFinish
mscoree
_CorExeMain
advapi32
RegOpenKeyExA
user32
MessageBoxA
kernel32
GetModuleHandleA
Sections
.text Size: - Virtual size: 892KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE