Static task
static1
Behavioral task
behavioral1
Sample
4b9a35e6e46f1ba9ae66800be7ffcfdb9f040a2474c1390905a3b298ca421dd5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4b9a35e6e46f1ba9ae66800be7ffcfdb9f040a2474c1390905a3b298ca421dd5.exe
Resource
win10v2004-20221111-en
General
-
Target
c6262257479c824411785d304e0d065a.bin
-
Size
760KB
-
MD5
1c74c702985ee3837a890eecefe85588
-
SHA1
3957f8fe444db599af859de8bf0edec7e386a289
-
SHA256
8a2b25f21faba97737b4e264d3e3441de40ad19144a08f743f64d60dae922946
-
SHA512
60848a68375d00ff2b3a278bd82fd0baf91b74a6a9a77387090104b7b82ba8a2044f5b9451000fd6f781be5168046fd3b2306efa538c0a957ff360358d1a1914
-
SSDEEP
12288:aVMWK8xFMKneF69qufDy1xMrvImVUlMPfghMkSoNnRXhtDBknwTZbp1GCkjdIoA:OxFM969fDynMbzilQOSorXvBT5G/juH
Malware Config
Signatures
Files
-
c6262257479c824411785d304e0d065a.bin.zip
Password: infected
-
4b9a35e6e46f1ba9ae66800be7ffcfdb9f040a2474c1390905a3b298ca421dd5.exe.exe windows x64
Password: infected
ce55d910281f51de0e8f626585b992e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
ShellAboutA
mscoree
_CorExeMain
advapi32
RegQueryValueW
user32
DefWindowProcA
kernel32
GetModuleHandleA
Sections
.pdata Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 234KB - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE