Static task
static1
Behavioral task
behavioral1
Sample
39c28f0244bfeb2fe54808cda05f80ad36a886f1e2c75960779ede0894a9219d.exe
Resource
win7-20230220-en
General
-
Target
aca042ff3879a53b09a6089012c0dc3c.bin
-
Size
11.3MB
-
MD5
8659d7cca7aefdb47824525204bd0f7c
-
SHA1
8a59432448e8237914862b75c9df04eae98af85a
-
SHA256
1e57c51cc9d846bf498dafd60c3423dcb6896cf9e2cc9f754e2ba7c77b38445d
-
SHA512
1cad88638e03d97d2f2e17d16f2ec47d8f9e17fd4d01338c96e68d9972026c40ac25e4cde17acfe2a01459bee636344ec9edb1b21d8eda480659d0f8adf581e7
-
SSDEEP
196608:5YrwsaFwhHUUsbz+7DQqM5azdmNnIbGDsKS5+9xiuqJEI3iPi3ghR+epBX21bFCr:5YZDFUUc+7DQtazdmNnI6Avs9wiI3i6S
Malware Config
Signatures
Files
-
aca042ff3879a53b09a6089012c0dc3c.bin.zip
Password: infected
-
39c28f0244bfeb2fe54808cda05f80ad36a886f1e2c75960779ede0894a9219d.exe.exe windows x86
Password: infected
32b37a1ff8b4e9d40e4e5c4a048ee542
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalSize
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
gdi32
GetDeviceCaps
ole32
CoInitialize
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.OEe Size: - Virtual size: 9.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
._*d Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.##5 Size: 11.3MB - Virtual size: 11.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 403KB - Virtual size: 402KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ