Static task
static1
Behavioral task
behavioral1
Sample
ff11e869a01559bf8b75131241b6cf5d670612d09f6ee89038486835f4b0feab.exe
Resource
win7-20230220-en
General
-
Target
5efc3f0cbde93b03c98bf94804927377.bin
-
Size
689KB
-
MD5
7918dcbf397ee1bb2429cc8d8cacd810
-
SHA1
702db9f5fa0b8de7ea079a07a95fb3f5c85a8abb
-
SHA256
e26e4cb31490241f519c1e94d9f0203c39b1f023cda35dcbd02a3de6d94861ae
-
SHA512
2ed88fbb961ff252dc6038a5d5f5224ea0f0579b602c31586b6fe8641c7abf19ea2c4274dd26e5781b5bcaa2a7b2f3efeec0c2b43d81e5badb9cdd0036c20a5c
-
SSDEEP
12288:nmeVNwJY4PkhTX7LMx2m67CQLkb9nRMdcIwqMZhhc8KOhdXeT0s7qdbOV5XnDqtg:nmeV6JGPLMYmoCQY5uOIwFKOPXexqdi7
Malware Config
Signatures
Files
-
5efc3f0cbde93b03c98bf94804927377.bin.zip
Password: infected
-
ff11e869a01559bf8b75131241b6cf5d670612d09f6ee89038486835f4b0feab.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.[1] Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.[0] Size: 785KB - Virtual size: 785KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ