Static task
static1
Behavioral task
behavioral1
Sample
4c0851b9e5781595ccbbb892a8dcb6b6904974d412dac559de97a687fbb2a64d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4c0851b9e5781595ccbbb892a8dcb6b6904974d412dac559de97a687fbb2a64d.exe
Resource
win10v2004-20230220-en
General
-
Target
5a8767d187198eea0cc38b8a02a9533f.bin
-
Size
645KB
-
MD5
85bfc0d7afaaeac777e5172f577bb6f9
-
SHA1
19c09f8ead895310765486fa3528bad80647d670
-
SHA256
8177f673f4def53348da0465117ba6719518fbceb7f1326e2bb8c106a9ddca75
-
SHA512
c5fcca7bbc867f5a114247dffb5909dfe1d3ce397e5add101de1ef7f5a0fdcf606e542b946962b48949bfe807bebc5147f9033a3ae37c9f7540db47a11726a49
-
SSDEEP
12288:XrZm1ye5DqocobEZYuQn197HV8bzxDGLnbqdfqasCivr6xrSPrre3vb9j:XrZm55DjG2ZV8bULbiiaGj6xrSPP8vbt
Malware Config
Signatures
Files
-
5a8767d187198eea0cc38b8a02a9533f.bin.zip
Password: infected
-
4c0851b9e5781595ccbbb892a8dcb6b6904974d412dac559de97a687fbb2a64d.bin.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 698KB - Virtual size: 697KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ