Static task
static1
Behavioral task
behavioral1
Sample
caaffc1638da3de6acd3312311e3a3ffe4cead5129034a05d7a7eec0fd3d94a6.exe
Resource
win7-20230220-en
General
-
Target
26de0476c397c27854e9cdfa987441f7.bin
-
Size
689KB
-
MD5
c0c848e7498e6c7af5b81638a9c50c74
-
SHA1
c8d9aeeb342d536a2ff3e3be0e1b835c3bf04c98
-
SHA256
de6b706fe1aa363992662aa4a398a341120e2d01c0b53842134912e110b15de3
-
SHA512
2479a7b64afe151e2c686bebd123c306c2dd9d292728f3a17d934b28de105cd036eb55386aeafe423214075b2b0643672938ed8ee739055cf036fddd669981be
-
SSDEEP
12288:99FX3z4VoyIXwYFwnYHLwKAPeFmjbboXBKNhpRNjXCJU8fnzPzlfazG0jlLq:5zsohgYFwnYHLbAVj/ooXhjXfkBCplG
Malware Config
Signatures
Files
-
26de0476c397c27854e9cdfa987441f7.bin.zip
Password: infected
-
caaffc1638da3de6acd3312311e3a3ffe4cead5129034a05d7a7eec0fd3d94a6.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.[1] Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.[0] Size: 785KB - Virtual size: 785KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ