Static task
static1
Behavioral task
behavioral1
Sample
bb4297e1d60fbf0c9670f3a436d3c00993307ccf5bbf9bade4a6ebcb608edd6c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
bb4297e1d60fbf0c9670f3a436d3c00993307ccf5bbf9bade4a6ebcb608edd6c.exe
Resource
win10v2004-20230220-en
General
-
Target
2ddec3a033a6ded2ec135bb2f3ec897d.bin
-
Size
840KB
-
MD5
394b81c1853453094d13866e5026bc9c
-
SHA1
858a10ff4e51cf2cabdb9e3c530fd8cc303ca012
-
SHA256
7666667996d7eab9f2dc4a0d0816c1016c5a40db921aea06fd360a9efb5004a1
-
SHA512
329b6191a0e737abbc0af971f092ddd5aa0eb03cfc8496554db4727aaa970745c216b2bcbe7c2dda07e6818e78bb5ac394f26c16dfafca935d9cece61f9c4458
-
SSDEEP
12288:HJRowsN43Kz42wSuAE5+9SoRzeZ/EDl6+EW982N3Ysf+Q6aTj4tm4ohicovi210:ToTm3i4kq+soRQ0gvfsGEMs4o8vi210
Malware Config
Signatures
Files
-
2ddec3a033a6ded2ec135bb2f3ec897d.bin.zip
Password: infected
-
bb4297e1d60fbf0c9670f3a436d3c00993307ccf5bbf9bade4a6ebcb608edd6c.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ