Static task
static1
Behavioral task
behavioral1
Sample
fef75dbf20c3ba832b5ed9d057f26e61915501bae7c1e11c367793546c7713aa.exe
Resource
win7-20230220-en
General
-
Target
ccaffcd12dcb30adb5250f30026ecd1e.bin
-
Size
4.1MB
-
MD5
489156d1f70a1022a68d781ef45c9ff6
-
SHA1
8db1cc08eed99624c5cf38b87bf779979f892faa
-
SHA256
a44d659227b87e959a7807b9d85d2fd571665a4296590ed59114cc5b3ebf94f0
-
SHA512
22da74413f53c2e492dbbecaab38a09e96c6fddb942a3b2f3e1e0d3169e6adf7d1e15cc0447e8da34db7dd08aa25dc7ff0ecd2b06b8784a423990e668f45c0d6
-
SSDEEP
49152:2gPOeHehrDXAEP/e3I4MX9EegUAlyvwy2up7hdb8dRmPzYW6lvNTZSkkuQQsOdu9:F2eHeJne3I4Uau9vSmPsW6lvjJQ8dr8Z
Malware Config
Signatures
Files
-
ccaffcd12dcb30adb5250f30026ecd1e.bin.zip
Password: infected
-
fef75dbf20c3ba832b5ed9d057f26e61915501bae7c1e11c367793546c7713aa.exe.exe windows x64
Password: infected
7dbd2319b33ed25eb7ad7d0162c2bb3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
malloc
memset
_get_pgmptr
sprintf
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit
kernel32
Sleep
GetWindowsDirectoryA
CreateProcessA
SetUnhandledExceptionFilter
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ