Static task
static1
Behavioral task
behavioral1
Sample
4e28350d943c406c17056b494e80769525758a574a6507c7ff614491284db875.exe
Resource
win7-20230220-en
General
-
Target
df861720d9da5acbf5a413f4b6aed143.bin
-
Size
298KB
-
MD5
ad65d185366cb4bfb1c41975f413e985
-
SHA1
86fd995309a5806a76b588485faa29f0f1a0fe2f
-
SHA256
50dda0309538a63b7f24b92fa12929070ce5e8b7cd2ee8815484e38704460cf8
-
SHA512
c17a7513bec63e47b148f2e6c7bb39a6daa1c0783e6f6ddb731e91c0e53268983ca06c3caf65a79a8a72bd56881a70a3569c4a3d1336f259c22de4a1fbc663df
-
SSDEEP
6144:mGl6e/SjZtZVsqDzRKIet3yM5qcwfzZL+IRS6x7RUQZPjOA4AHQzgJ:bFAl6a+6Sc7TbH4Aw8
Malware Config
Signatures
Files
-
df861720d9da5acbf5a413f4b6aed143.bin.zip
Password: infected
-
4e28350d943c406c17056b494e80769525758a574a6507c7ff614491284db875.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 405KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ