Static task
static1
Behavioral task
behavioral1
Sample
0354ff20b145535cfd2e4c20b9c039171416f5035ad4c838eed631367aa3064b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0354ff20b145535cfd2e4c20b9c039171416f5035ad4c838eed631367aa3064b.exe
Resource
win10v2004-20230220-en
General
-
Target
5087ed60960438ffbed0c72510f29028.bin
-
Size
855KB
-
MD5
e74e64f3c01ace1b74b3140134b5eb9f
-
SHA1
dda7af5bc2d3e7fcddc8e56ca6e646173181a9e6
-
SHA256
189c28c91950a71339d758b3105047414cf8f20bcd2601ac8aeab73de9db4475
-
SHA512
f21f9036ee9864a9da50923afa78a7f550e57fe1c42fa434cfef9c3ba2f2caacb28eb95fffdd5283b00a5461da38ac4bcc34094cd716ed192da449ed2f2f6186
-
SSDEEP
24576:XGEeBZSokPnsVrqFCSMoPRGm68kFlx7B6sOY8LX:2lMXsVOFCvZFl7BOF
Malware Config
Signatures
Files
-
5087ed60960438ffbed0c72510f29028.bin.zip
Password: infected
-
0354ff20b145535cfd2e4c20b9c039171416f5035ad4c838eed631367aa3064b.exe.exe windows x86
Password: infected
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 112KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vnuspets Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
npwxiihy Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE