Static task
static1
Behavioral task
behavioral1
Sample
464f57bb810e30c1be3765ec17bd268cfa1b4019e9ba9625329669f8385e52ab.exe
Resource
win7-20230220-en
General
-
Target
464f57bb810e30c1be3765ec17bd268cfa1b4019e9ba9625329669f8385e52ab.zip
-
Size
38KB
-
MD5
f6e2b3b14abfb941f3d248b7320a93d9
-
SHA1
9b522470e5a8d922c2f12fd17b98dbe11c16c04e
-
SHA256
aaed76cd7b3222aab1ce717ad000aa60500102f4f810d1d705460bbf748b160e
-
SHA512
d90e60913323a031d0d9c734abdb3d6ea62db21b2b7f227c4f71192fcd7660e3c1cd5c774c2a6d704ac7361a99f98dc538306295134ea1038178bdd576c3d254
-
SSDEEP
768:pn7wpC461g00uI2XPjK+0s/p774iyp/K0YtLbacRZlLNPxQjTaFMAIZg:N7N71l0utXP5d74iXRVDQ6aZg
Malware Config
Signatures
Files
-
464f57bb810e30c1be3765ec17bd268cfa1b4019e9ba9625329669f8385e52ab.zip.zip
Password: infected
-
464f57bb810e30c1be3765ec17bd268cfa1b4019e9ba9625329669f8385e52ab.exe.exe windows x86
Password: infected
dea7238b333040c9efc51e6ebcf59a51
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memcpy
strtok_s
malloc
memset
atexit
memcmp
kernel32
GetCurrentProcessId
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ