Static task
static1
Behavioral task
behavioral1
Sample
6b70e9be1c3c1d2a2941e6d8850adbaeea8fe69622a62f8084737335bd90a29d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6b70e9be1c3c1d2a2941e6d8850adbaeea8fe69622a62f8084737335bd90a29d.exe
Resource
win10v2004-20230220-en
General
-
Target
b7e2faee1a43306c9823751208e296da.bin
-
Size
976KB
-
MD5
a0a534ce8745f9cc7306e60f298cadec
-
SHA1
963fe1ad205020142edc70bf62a798234331a6d9
-
SHA256
5a345d80b266647207e4d05b0049d56265e2f523a2121acbc1b212b045d68a5b
-
SHA512
7a1c700a00714bbaa394b51e5092cc72f5d3baa66ebeb414999c759594f4adf10c6f125d9e0f282054ce657455dad29169e18213290cf0518dd030eca5df6827
-
SSDEEP
24576:rFzE/AIhFRgmSEZAXx7VfJkVWFYZXPev8HbHC47If63GF:4RME+XYWFm2v8HTqaGF
Malware Config
Signatures
Files
-
b7e2faee1a43306c9823751208e296da.bin.zip
Password: infected
-
6b70e9be1c3c1d2a2941e6d8850adbaeea8fe69622a62f8084737335bd90a29d.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
JbksF+Z Size: 941KB - Virtual size: 941KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ