Static task
static1
Behavioral task
behavioral1
Sample
0e9897fd86ef718d4ff9e73768ce3e660743a5485a7d9c216b7eebc8d908f221.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0e9897fd86ef718d4ff9e73768ce3e660743a5485a7d9c216b7eebc8d908f221.exe
Resource
win10v2004-20221111-en
General
-
Target
b0e50123ba50bf69c5aaa319b9804210.bin
-
Size
11.1MB
-
MD5
de4c4adfad2173d49504efeaa6a6e65a
-
SHA1
86a27317a6d3245e1bdf0beace5e117893cc08f8
-
SHA256
edaaa8080a562c020e33318be899e87d76116694ea7f0b42d940440bf615c713
-
SHA512
dce788904139e7163f74db3ec1a93c2d20a9ed4b4286fd4c692ff3338def229fcebdc44f907aa56e36c57a8dba82a9e666203a21065f8988a2f10a812427645f
-
SSDEEP
196608:BSEI8k64n7hO4WTeoeKA4+xC9XWuF0RI2IVt4L79zft1/BZVw4:BSEleF+TeoePtChma2IElp9
Malware Config
Signatures
Files
-
b0e50123ba50bf69c5aaa319b9804210.bin.zip
Password: infected
-
0e9897fd86ef718d4ff9e73768ce3e660743a5485a7d9c216b7eebc8d908f221.exe.exe windows x64
Password: infected
fd87f79fc1bdaef4e66bba3ab9909015
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualProtect
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
oleaut32
SysAllocString
mscoree
CLRCreateInstance
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Y#G$WREF Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Y#G$WREF Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Y#G$WREF Size: 11.8MB - Virtual size: 11.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ