Static task
static1
Behavioral task
behavioral1
Sample
0c802565c73fd2fd624ecab818162f8873935308ebc95f3b17fa74a6c582db12.exe
Resource
win7-20230220-en
General
-
Target
97201c944dcd7e82672458514a67a7b5.bin
-
Size
874KB
-
MD5
efe511a6447236cc9060d75aad4db322
-
SHA1
eaf538cbdfc4c70ef0c0908e04f3c3ec1a9347b6
-
SHA256
caff4b32dd7a409701659512068dbf972b1afa11b06533e17b4e52083576f64c
-
SHA512
22ed255764f3d6b1f83fe110efc5a35736daf385dd1817a2054c4b63adde3a9bdd8c86d9ac594b8dbfcf6f7ed53778d829929476bd5b72cffed8a32850b73292
-
SSDEEP
24576:B4MjE00TT+xJ7ot0BN8ilwNpwzVTQnTif:WMiT+xZot0UncTQTif
Malware Config
Signatures
Files
-
97201c944dcd7e82672458514a67a7b5.bin.zip
Password: infected
-
0c802565c73fd2fd624ecab818162f8873935308ebc95f3b17fa74a6c582db12.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ