Static task
static1
Behavioral task
behavioral1
Sample
b6fbba05f1a32b2fe499818cf4f2e09b6d6110e715e19efd16274a644f338a0c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b6fbba05f1a32b2fe499818cf4f2e09b6d6110e715e19efd16274a644f338a0c.exe
Resource
win10v2004-20230220-en
General
-
Target
774bd5fa9e8e0a7f86c1c90a8fa36220.bin
-
Size
6.2MB
-
MD5
66084b41c21bce4eea4fba76d795e7a5
-
SHA1
518dfbf518adea897be99564991781a91554484c
-
SHA256
0dec4f7f0bbd17efab1cb9af9c0fbb78440b7e1fc02a64c169b42752305fc043
-
SHA512
a429421f2663f40d21b6ffca8a2bd9877131611fb08e89ede84136df10f9727b35305c5ad19a6c45e1839bc4a733e64e4d3f9f171e4c7080de30afe0e4ea4038
-
SSDEEP
196608:AMFKPikDThUNrzpFU/HE3oHgwrOhdMttsX+Aw3s+m:AMFGUNpFU/HUIg6ydM8Xw3rm
Malware Config
Signatures
Files
-
774bd5fa9e8e0a7f86c1c90a8fa36220.bin.zip
Password: infected
-
b6fbba05f1a32b2fe499818cf4f2e09b6d6110e715e19efd16274a644f338a0c.exe.exe windows x86
Password: infected
42a4be2e16070c563b65000460421a66
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ReleaseDC
CharUpperBuffW
gdi32
GetDeviceCaps
ole32
CoCreateInstance
oleaut32
SysFreeString
Sections
.text Size: - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.!EZ Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Urs Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.?=S Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ