Static task
static1
Behavioral task
behavioral1
Sample
9b5856e13bd3973c4420ff1018387effff255384e7dc5c67f6355754ddb60849.exe
Resource
win7-20221111-en
General
-
Target
56079b38bfe5f4d2cca50040c6b28334.bin
-
Size
2.1MB
-
MD5
04bb5d6fa4e8d96bd295726a34bf82d2
-
SHA1
1b75d13705ee000ce994faa8dfbf36f8ac008685
-
SHA256
da146e424567ffacc243a9f72bdd6d763a0b640b95d6886ac32ec349dbdb38d2
-
SHA512
4914bdc60bc3e0787a1dd765943147539ff983cc0e5a9628fc93de8095ed5aa39ca0bb000bb90234c7be5d063723da47905c2e48c11e14682a9969ecc2db1c53
-
SSDEEP
49152:n8sSIEFEz0NfaF2MovCZnJ0c00GAPx3h9yj2w+yzD3t:8KEGYg2M5yc00R9/w9zDt
Malware Config
Signatures
Files
-
56079b38bfe5f4d2cca50040c6b28334.bin.zip
Password: infected
-
9b5856e13bd3973c4420ff1018387effff255384e7dc5c67f6355754ddb60849.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ