Static task
static1
Behavioral task
behavioral1
Sample
e49f4942afa894a6907ed4cfb3333664fde60d1b756109d8e8b22cd4bb0f5fad.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e49f4942afa894a6907ed4cfb3333664fde60d1b756109d8e8b22cd4bb0f5fad.exe
Resource
win10v2004-20230220-en
General
-
Target
2e7ec791d09a6551d1788f93946bc01d.bin
-
Size
957KB
-
MD5
3aba1872f93a24757a83feb15b8058cf
-
SHA1
cda216537ab1e5524a12cae166902af5e2fec83b
-
SHA256
689192c782bd7c4c2c0a5b579d33a78a249009b2db14a421244eec74294a466b
-
SHA512
56350468d2de1f5278f486f15a3d15dea8a7b90fe1d79dea07a7864c60b7ad150fb07efbbdc4a6b4e5d9df036e3d417698df5818db8c86a0a4d65cac1f443dcb
-
SSDEEP
24576:gs4RKzHsScNPddce5p70SdTJ1yTclVUdEAqg2426S8:g16sSCIeTpRJ8TOUdEAqg24vS8
Malware Config
Signatures
Files
-
2e7ec791d09a6551d1788f93946bc01d.bin.zip
Password: infected
-
e49f4942afa894a6907ed4cfb3333664fde60d1b756109d8e8b22cd4bb0f5fad.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ