Static task
static1
Behavioral task
behavioral1
Sample
c5963a1865a79e63cf6c451a27db54911fe38cfda287fbf537eb15878666db89.exe
Resource
win7-20230220-en
General
-
Target
2803989c03d0d864c20efb1317b157af.bin
-
Size
724KB
-
MD5
9d3977d6eb2394e959b2df6589db297c
-
SHA1
704fc7c37b106b8c059b08980e290f3b788ef1bb
-
SHA256
ab0fa60ea91b68f9724e616bfb74fc05b98b83bc8b69e46295357ad350bdd60e
-
SHA512
1b0b6aff626dfe032f589b1ec068ef36cc5715e1727d5971903722041555876e3b4728d1dcfa488edb47c14dda9442ea4ce043c6efd7c579ed277723c957acba
-
SSDEEP
12288:4Y38ASsXmpg1Ym7tlciEM6g58ygZKz4pZv8t8dzfaO8KQWsHTMZG:4VASddatlcJM6gabpZzzy5yG
Malware Config
Signatures
Files
-
2803989c03d0d864c20efb1317b157af.bin.zip
Password: infected
-
c5963a1865a79e63cf6c451a27db54911fe38cfda287fbf537eb15878666db89.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 779KB - Virtual size: 779KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ