Static task
static1
Behavioral task
behavioral1
Sample
d5f9fb5cd5cfe9a7e84b147ab8819f0a6a6b5330b9b86c76a6031d47bdf2262c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d5f9fb5cd5cfe9a7e84b147ab8819f0a6a6b5330b9b86c76a6031d47bdf2262c.exe
Resource
win10v2004-20230220-en
General
-
Target
a29e1f18b568200a46c3c8e44c534566.bin
-
Size
527KB
-
MD5
c499688c981c05e7cad75e15dc33d9fe
-
SHA1
6a5319dc59a6913ac56d4a19a7e9ab45936dc4d6
-
SHA256
0458d0bd0ec5f1c045f7899763bec2b686fb9e34ddb434da25da4ad6ceab522f
-
SHA512
7308d59bfff9f1c66aacc8a528f83efdecf227c2d4ba159d22d2eff668e1dee61bdd689d4a5a0e8ddad82d5dee0f83e8e45b27c644df8372c3f79eb11f3239c2
-
SSDEEP
12288:ypTfUV5ZrG+ZESN2eTuHJLJ3IwCLj74LZKZwId+/Nus8hSGOs7lI:ypTk8+ySN/SHJFILLjJwIBs8hSG9xI
Malware Config
Signatures
Files
-
a29e1f18b568200a46c3c8e44c534566.bin.zip
Password: infected
-
d5f9fb5cd5cfe9a7e84b147ab8819f0a6a6b5330b9b86c76a6031d47bdf2262c.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 795KB - Virtual size: 795KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ