Static task
static1
Behavioral task
behavioral1
Sample
28f43e54049a99dab96198f5bfb103e9.exe
Resource
win7-20230220-en
General
-
Target
28f43e54049a99dab96198f5bfb103e9.bin
-
Size
485KB
-
MD5
28f43e54049a99dab96198f5bfb103e9
-
SHA1
3fb64cb7ddc0ac83ee196fc048af2bbbdc87873a
-
SHA256
9bb44477f819d5e21fccd7431311639444e8cf7793c05bf2bc1d6b2e235b6108
-
SHA512
96f96cd415dd1bf6462696b8a6475179cf3fb933bf10dc1151a73c5f35eea7379f95a9e85ed06cbf1f7086303416065b5a24934a2feac0ab4ddd27523c26cb2c
-
SSDEEP
6144:1zIGwu0M0Fp4w/waCheOXZNWDHM57BPWB3lIQftgz3rDdYXuTkz:2Gwu9Qea8euNWjeMoQWz3uXuTS
Malware Config
Signatures
Files
-
28f43e54049a99dab96198f5bfb103e9.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 400KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ