Static task
static1
Behavioral task
behavioral1
Sample
b66c50211263d233738e04d25bc0d59bdcdb522d2178bf94d95094df6d329aec.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b66c50211263d233738e04d25bc0d59bdcdb522d2178bf94d95094df6d329aec.exe
Resource
win10v2004-20230220-en
General
-
Target
a132b66d18edcb449168da14eae57dc2.bin
-
Size
906KB
-
MD5
e11f31493b75d5915da16aa08c9b17b2
-
SHA1
4fe6de30d9c45705cfe9af4304b2344619ac66ab
-
SHA256
d7c8439571d849f7d7eaa8404b6b34a823e2ff98cb5b294e374e3ae2401f7061
-
SHA512
ed88c06e30f8cfc0fc1e353d8280d249f4578a5d22554f03ad9cd556bafd80b7b6458169b343384ccfdb040d5e0b31c0b3d65d7b82bb8e5ea9a1043d9338d113
-
SSDEEP
24576:d8tLJ1UrPUXdaJ28z7rTgTxxkFri4tqoNe6Er:d8OUXIU8XrMT/kZipolEr
Malware Config
Signatures
Files
-
a132b66d18edcb449168da14eae57dc2.bin.zip
Password: infected
-
b66c50211263d233738e04d25bc0d59bdcdb522d2178bf94d95094df6d329aec.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ