Static task
static1
Behavioral task
behavioral1
Sample
d7c3bb09aa5e1d92564315ab491476d795850f7503dbad7e2835a87c7904d5b2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d7c3bb09aa5e1d92564315ab491476d795850f7503dbad7e2835a87c7904d5b2.exe
Resource
win10v2004-20221111-en
General
-
Target
a4713efd7588cce07c4d82dda4efbfd3.bin
-
Size
459KB
-
MD5
e9de38ba3f94f788233c6ee11d4b066c
-
SHA1
91b4f56a20634209fc900c980c4f8bdede1075c8
-
SHA256
7a2bcfdb90a7caa995210c5f09706e049f7eaa6b62f10df1b0c46e143295672d
-
SHA512
87da49eec479dac7934aadb8fc411802b35696e93f99f2f2a9737aa870457cc7d6028d10da702c7905d3f4e6849bf3b6cb452306ce2b79fa9566d35bb1dc9f5b
-
SSDEEP
12288:LIBQ9AQ31MW72XH6URLtJ94mJ6LUowWNOe/v:WQVWE236URLZ4qswW0Q
Malware Config
Signatures
Files
-
a4713efd7588cce07c4d82dda4efbfd3.bin.zip
Password: infected
-
d7c3bb09aa5e1d92564315ab491476d795850f7503dbad7e2835a87c7904d5b2.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 615KB - Virtual size: 614KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 434KB - Virtual size: 433KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ