Static task
static1
Behavioral task
behavioral1
Sample
3a86f6f2018119707b616977342cbab7e40ba5771ebc853301abe2b28c613e1a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3a86f6f2018119707b616977342cbab7e40ba5771ebc853301abe2b28c613e1a.exe
Resource
win10v2004-20230220-en
General
-
Target
e0031838b5f640d5d70532d03b016ec1.bin
-
Size
504KB
-
MD5
cb9c13bfb025c5867f51223631df9066
-
SHA1
1d41ba87a559931fa4ee52390a72cde8555591b5
-
SHA256
a48c0de81e148a9d0f3e24c7e37f3c653b9ac420a5bce3796c9d406d3936b276
-
SHA512
a88ef4c98411d3033d564a72215f1f2cd0bf81eb696a3aaf3f3c56ad3f52598418007f0721dd9e3bb2a067224da76607bd76b53b702dc204b26819d55ef6ba4b
-
SSDEEP
12288:7zbYW1MUziqrETWcJRXgjK0UtaQ2uTDaVewo:Pb57NaWuXgjK0UtaQ2uq8
Malware Config
Signatures
Files
-
e0031838b5f640d5d70532d03b016ec1.bin.zip
Password: infected
-
3a86f6f2018119707b616977342cbab7e40ba5771ebc853301abe2b28c613e1a.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 741KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ