Static task
static1
Behavioral task
behavioral1
Sample
4891929d328a1b84f6c6b6f0b08a7b3e1c245e77edfc9c48f4b13c703cbafe9b.exe
Resource
win7-20230220-en
General
-
Target
339ccdd61e4dcfc1c73ecb33cbf6703b.bin
-
Size
1.9MB
-
MD5
ab8856152b758b0a33556feb94c621e9
-
SHA1
5144fb1ae4a2bf63bc7f4f321828a58ca072208b
-
SHA256
6fde781936033a7a4bf577708a8e99758bd724049a5d48e80792417c4728fee9
-
SHA512
45bd6c750d645361c65b0101cf71d880f8a6effb1cc08bd201ffcc5852d61bd64b605e421a7b7724ec9079909a862227e170bea3278a2a7f0c0b4dfc35ecdb2b
-
SSDEEP
49152:69g0+ksKpCJAGb4kR8JcOI3adHyplmxNcC4Kt92:6U513EE8KOIqdQmwlj
Malware Config
Signatures
Files
-
339ccdd61e4dcfc1c73ecb33cbf6703b.bin.zip
Password: infected
-
4891929d328a1b84f6c6b6f0b08a7b3e1c245e77edfc9c48f4b13c703cbafe9b.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ