Static task
static1
Behavioral task
behavioral1
Sample
e4cd4902e523d9de131aa4a908e3e1ef8b7210c6833455db8a3cb19afba7eb37.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e4cd4902e523d9de131aa4a908e3e1ef8b7210c6833455db8a3cb19afba7eb37.exe
Resource
win10v2004-20230220-en
General
-
Target
385674b94befa4586707d78a1f335430.bin
-
Size
1.1MB
-
MD5
4895f6f0722a2e6421c0839786fcb942
-
SHA1
4d80b37a31b1f777601e6dedbe57df66963ef801
-
SHA256
cb3bd52ba82df248ee86856e5b041f71b9f105f8ffc8e9e278543fb0e05f954d
-
SHA512
731092082d1e51423668b2ccfa9f170f9de70ff8746a6f619ec5bb55b954806194ecd912af87bf0a0efee30e9cd2ff487522ad1689e1eae8a0ffd59242c85597
-
SSDEEP
24576:Y7sN8AIZomOVph8NXfL8/xabOrx7XhIGFCRc91lvXKjn27brcgefAN9I:UJrit81kJ7x0RcFvKj4fefYO
Malware Config
Signatures
Files
-
385674b94befa4586707d78a1f335430.bin.zip
Password: infected
-
e4cd4902e523d9de131aa4a908e3e1ef8b7210c6833455db8a3cb19afba7eb37.bin.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ