Static task
static1
Behavioral task
behavioral1
Sample
f3c78a11dc0b821e6833fc5c2040cb94a2b4f91a37d27bce5576c1daa190b8e7.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f3c78a11dc0b821e6833fc5c2040cb94a2b4f91a37d27bce5576c1daa190b8e7.exe
Resource
win10v2004-20230221-en
General
-
Target
d48f1e07e2a3a115b8607be5d66654f6.bin
-
Size
726KB
-
MD5
5040e63b4f71441b9e79f9674ee85403
-
SHA1
d1566774ea2c36248d81d9c0e58d3cef992cb4b6
-
SHA256
bf7a3103923ac122fefa213632c8ea05a2a253e11e475f715c568cb4baebe826
-
SHA512
0744832cec14e2978064fa59ddffefb9e221586a0cdbb2b092ca3259462ec48070859b5eedb6617fc3bbe21a9e2a4f3a43542038996309be06c03d7dc49e5d7c
-
SSDEEP
12288:e0LpLAQjOx+VuXDADPbjkSjeTFFvezYYEzW+84pb242Q4HW57yxBwE4THOdWGI+G:HL5jfVuXDP3FJEnEK+fpboHiGxBwrDnf
Malware Config
Signatures
Files
-
d48f1e07e2a3a115b8607be5d66654f6.bin.zip
Password: infected
-
f3c78a11dc0b821e6833fc5c2040cb94a2b4f91a37d27bce5576c1daa190b8e7.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 810KB - Virtual size: 810KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ