Static task
static1
Behavioral task
behavioral1
Sample
b564ce75ebda7ddfe0c1be6becd119905c850c6703bb81af1d0ca8d8b9dcb86a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b564ce75ebda7ddfe0c1be6becd119905c850c6703bb81af1d0ca8d8b9dcb86a.exe
Resource
win10v2004-20230220-en
General
-
Target
d9e77c8ca14edd3fabf09c01f61c566a.bin
-
Size
210KB
-
MD5
1dc96dfbc2057afc0b1b08c8c3f1e313
-
SHA1
7be5546838ac592fc1635b6ce626748d0c584db3
-
SHA256
ece630cb1ea8195b2910581d3d0a52a0d46e7590a9c4adf95311d7dab19c94cd
-
SHA512
1439d73a1db40bb75f7291a1773c73139afb8f95f60e40dd70133079881d471c563e24a7d5846029bc485a3a28a63104dd1cb416287d74c60565513098256baf
-
SSDEEP
3072:ASjZLu7DMy7rjWKKTmgn3Xrz7pjq1Ot+5q4K62bxmZTwyNc1Ma7JMaHKBIB3Jq26:Tjx7Uv+nfc8WK6iHp1MsqBIj5cqy
Malware Config
Signatures
Files
-
d9e77c8ca14edd3fabf09c01f61c566a.bin.zip
Password: infected
-
b564ce75ebda7ddfe0c1be6becd119905c850c6703bb81af1d0ca8d8b9dcb86a.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 515KB - Virtual size: 515KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ