Static task
static1
Behavioral task
behavioral1
Sample
6a880a0171c798787efbfbb86d5f97f2fba2787e6edf4377726948c3dc05c3d2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6a880a0171c798787efbfbb86d5f97f2fba2787e6edf4377726948c3dc05c3d2.exe
Resource
win10v2004-20230220-en
General
-
Target
488f22f68bd7f844eff2b28d64390dad.bin
-
Size
689KB
-
MD5
86766c9894d8f3655ed18d303ae6188d
-
SHA1
647cfba3718c83a38c2d86f7b4b627d646bacb9f
-
SHA256
7084ecc71a27c03f5da1c13b7bb9de561085380dbe4c71effd6617c014729b83
-
SHA512
363c6b7121221618f0b2f638f9e81f27fc057f133018e21bc100fe9012c32feb97d8802b25fa428311be910f96b97b8796c8c9443434e4b277026c84ac71346e
-
SSDEEP
12288:aOXpb+e65ZKy9qOd6PoLb/6Z4YylWASX/Ok3Rfajpo6Pr+r5PGsjtv0obpS6:vXpb+/L70M6MCZ4zKPxajKKeVG4dTbp7
Malware Config
Signatures
Files
-
488f22f68bd7f844eff2b28d64390dad.bin.zip
Password: infected
-
6a880a0171c798787efbfbb86d5f97f2fba2787e6edf4377726948c3dc05c3d2.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 747KB - Virtual size: 746KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ