Static task
static1
Behavioral task
behavioral1
Sample
8e4936a8044f833fa8b5e67067208e8b81c0ca55844122013afe82a0af3b6eb6.exe
Resource
win7-20230220-en
General
-
Target
6b0f9cfb69941d168fef11869e4c42b9.bin
-
Size
726KB
-
MD5
e410f55c76cf96b4681114a6f17d4b5a
-
SHA1
9679f90bcbb30ae51b3cb3f97f85e2472075990e
-
SHA256
c4dd54b695dee5780cee6b00ad3ecf924fb1ef97d50abeafe37575de3ba571de
-
SHA512
53b0c85c5707cfe72516e7fa75b0ec3a8c901d8813fb90a4a7a853bfc76af3a115355514ed6465d122afd2a5560083aecdda7c7fcb8cbef295c7f803912be3af
-
SSDEEP
12288:vt5kz0mWCHRqlrXI5x2W2XvnHGHvXa62kIKBDB/X16n83OOGzTvgKC2P9nbU:vt5MZqrXIPpa6EK1B0nGOn4XG9nw
Malware Config
Signatures
Files
-
6b0f9cfb69941d168fef11869e4c42b9.bin.zip
Password: infected
-
8e4936a8044f833fa8b5e67067208e8b81c0ca55844122013afe82a0af3b6eb6.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ