Static task
static1
Behavioral task
behavioral1
Sample
TT $45,000.00.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TT $45,000.00.exe
Resource
win10v2004-20230220-en
General
-
Target
9abbdf57f5af65b41e094deb329afaf2.bin
-
Size
486KB
-
MD5
cf8d3102c620c18e49559508d8e435e1
-
SHA1
5b8a2c369d219035afaa8a20dc11bc327a39ab8d
-
SHA256
13de032fcf7d993504912823ca158a67dd69fec85b521801e17b87d2ff4043cf
-
SHA512
5ee7d25e12cb4ff9ee38ec4173e7b2864085dc9f27673863bce3a75db16cb332846414e1b1753152c6f50612b12bedf9ccdb68f0f619e963c8a15788f1ebd206
-
SSDEEP
6144:4/4UOjSUEKUuIgeQ+e/AxPa1T1b2R7rqmH1jz5OjSgi57xbO14wjxinBfQBNkE7U:4gkktAPYT1SdtVwjSl2RNGn1TUCg2
Malware Config
Signatures
Files
-
9abbdf57f5af65b41e094deb329afaf2.bin.zip
Password: infected
-
9c40f6d08a13cb9e46e830e2d99152649363716f7558a211cfd8f8418da1b240.zip.zip
Password: infected
-
TT $45,000.00.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ