Static task
static1
Behavioral task
behavioral1
Sample
f663356540b9ee39f89ad3f24b91c37b4181b855bbaf09970f6aa00ab6dae4a4.exe
Resource
win7-20221111-en
General
-
Target
3358575cf18a8e2e50b98946b214d925.bin
-
Size
2.2MB
-
MD5
4ffc1fb8adb332d803f71300fc3c7686
-
SHA1
071f73eb1a8d3a2328641dd7d1f72f68fb575670
-
SHA256
29bfd1a5f49beef01a04948d19492268d8bd12144c718e6b6250bcedc7dc8683
-
SHA512
44042766c87edf33a9fd475cb02ceedba99948fba047ff38f8b261dc3483e4f6ee425b2f19e6810b0468949a018e2439335d25593824103f53fcb397de312db2
-
SSDEEP
49152:qlbsEn0qNslD3sjwJqfw2va5vKIbMCy7YYppJkobQyR4dKcdRvax:4bsE0qNslD3zJqI8y+HppCwtR4dvRSx
Malware Config
Signatures
Files
-
3358575cf18a8e2e50b98946b214d925.bin.zip
Password: infected
-
f663356540b9ee39f89ad3f24b91c37b4181b855bbaf09970f6aa00ab6dae4a4.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ