Static task
static1
Behavioral task
behavioral1
Sample
3e0cdcdaa9cf3c06e4f5c28a4d7878f8bd60265f2b7e9a8eb88a6f13b75435b7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e0cdcdaa9cf3c06e4f5c28a4d7878f8bd60265f2b7e9a8eb88a6f13b75435b7.exe
Resource
win10v2004-20221111-en
General
-
Target
6483a177ef7b0b280e5123654f6aed39.bin
-
Size
531KB
-
MD5
0344508365d7bdf2343b24c7a0e762fd
-
SHA1
11e5ead7d2a599c3dee7199ff9a00a4a06dbaf9b
-
SHA256
f41a2a1d26ef9702b0a95c7dcdeccc4befda3181a745c3838fe275b84031d2dc
-
SHA512
926f6e1494119d1b10fdc1f8c446dc74c83a1994079c5c7a164cbf1cabd6adbcfb825d9dcf6964a0bbe17698ea24718d39f76287c84dabfca66e8eda3d7cf4a0
-
SSDEEP
12288:cCHREiWP1sNNVouoRnASi0vN2xGarMx7dpi9OkAlvCSbdZj2:cCHyiI1sNNqRRnnIxBwx5pvL3hZj2
Malware Config
Signatures
Files
-
6483a177ef7b0b280e5123654f6aed39.bin.zip
Password: infected
-
3e0cdcdaa9cf3c06e4f5c28a4d7878f8bd60265f2b7e9a8eb88a6f13b75435b7.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 564KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ