Static task
static1
Behavioral task
behavioral1
Sample
305cfdd7d464938cabe66fcf3116df431c10742c775a4a588d38349ea18a7fb6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
305cfdd7d464938cabe66fcf3116df431c10742c775a4a588d38349ea18a7fb6.exe
Resource
win10v2004-20220812-en
General
-
Target
869037e716218fb7551d84b8ce7d0ae7.bin
-
Size
709KB
-
MD5
36501e3878f35c2ec7cc76b113632b22
-
SHA1
db1b23e5f84f195ddd468dc3b77d3902a902cc1b
-
SHA256
d2ea05b0fa56e153cdbf014f6083cd6826bf52894ea38a664b1ed3669d6ec1d5
-
SHA512
ee42a0beecb73f32c8ed95e1eea8baacfd9219bb3eb4330d5368c37ad4c43b97ea537109fd8e5885cca93ebaa8a77d8d940717f63d2b8a7a5573687d096af6e4
-
SSDEEP
12288:m6MaHYVYXv+OlQL+SmCp449WyykFJQz0UNCk5OVKcc7MIxTA9bIX5GVKmWcP/:62qLK4gXkozJKE7DEbIXIVBx
Malware Config
Signatures
Files
-
869037e716218fb7551d84b8ce7d0ae7.bin.zip
Password: infected
-
305cfdd7d464938cabe66fcf3116df431c10742c775a4a588d38349ea18a7fb6.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 694KB - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ