Static task
static1
Behavioral task
behavioral1
Sample
9999bf673c4a1b4d2d89443e5c30dfa13fd072789318fb1ca489a7b6b6f2ab2d.exe
Resource
win7-20220812-en
General
-
Target
d30b3357b5e1242cc61fbf256911354e.bin
-
Size
1.2MB
-
MD5
4b830cb6df60ac9b19eb51b8d5bc4d76
-
SHA1
da05141793e6a6b92c583ffe26d655761acd6152
-
SHA256
9a6c71e2a9445fee81a17006096cad0d0f94273d97d8318fbde8aa86ea88d423
-
SHA512
b1d1a050c4d9d83cc7b5c20f53d5600c05a595f93019fa11b999b648aae03df05096c8acaa8dac3da98077ace21864130fdf56af469a951c4764a230ec3c46df
-
SSDEEP
24576:/vYSDykAVRt0az/fL7uW3b/arNmnTf5E0yZkxdd3Su5pohXr5cX3:/gSWkAV9zmAzar0tTyalC+oh1cX3
Malware Config
Signatures
Files
-
d30b3357b5e1242cc61fbf256911354e.bin.zip
Password: infected
-
9999bf673c4a1b4d2d89443e5c30dfa13fd072789318fb1ca489a7b6b6f2ab2d.exe.exe windows x64
Password: infected
0859647ab6ecfba0413ee52145195b60
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
DragFinish
mscoree
_CorExeMain
advapi32
GetUserNameW
user32
CreateMenu
kernel32
GetModuleHandleA
Sections
.data Size: - Virtual size: 892KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE