Static task
static1
Behavioral task
behavioral1
Sample
BETALING.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
BETALING.exe
Resource
win10v2004-20230220-en
General
-
Target
Betaling.jpg_1.img
-
Size
1.3MB
-
MD5
18834e9533434790b56cbf2579183f55
-
SHA1
4b3f698e48f70c40d705590705d9c4d6fbd5a988
-
SHA256
3185d8e8484338169b004da9f6ea8e66f2e95f353b9d2a0cf833ce705ca2cfb2
-
SHA512
44077e6b49173e963a09b2b48d6957818e54a4d167034a05ad5360008b0d57df605bada880e6018b09f03ea44fa7d8b0f67f5e83e8113b27ae2dba797f5bf0c3
-
SSDEEP
24576:owwt+2McUJrdRhT5js5HE2u08wvQW0iaGTf/YeOXv:kt+XLsxRu08wYI/YNXv
Malware Config
Signatures
Files
-
Betaling.jpg_1.img.iso
-
BETALING.EXE.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 787KB - Virtual size: 786KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ