Static task
static1
Behavioral task
behavioral1
Sample
f797a34828089feb29e7f77d31f184b335d7958755d385fad50d69fdbd3660d2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f797a34828089feb29e7f77d31f184b335d7958755d385fad50d69fdbd3660d2.exe
Resource
win10v2004-20230220-en
General
-
Target
b3469fface251fb3d6a9e2da0d236802.bin
-
Size
971KB
-
MD5
02e954ffe15f238cac7fbad50b034baf
-
SHA1
96011beb47786358e8fba7f7896267f7343a1b20
-
SHA256
877116c7e89c99ebaa3dae2504b224cbb1b6a744aa1c87661425963021883abd
-
SHA512
fbeae395d217c00d0dac8e9e984a714eaff9ee18519f2cdc2685f06e6f5558073c7e0f23981c8ae4044f4de6e652c0841671db47ee09db59793142bd4a0057ca
-
SSDEEP
24576:sh3oZBQoOZTNvvpCjcQTc1gfO3OVCQQe1or:/ZGNvvBgFXT4
Malware Config
Signatures
Files
-
b3469fface251fb3d6a9e2da0d236802.bin.zip
Password: infected
-
f797a34828089feb29e7f77d31f184b335d7958755d385fad50d69fdbd3660d2.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ