Static task
static1
Behavioral task
behavioral1
Sample
2a8fdd6a69c03c5a536b9c560a65b6d25056c69416e952c51e9a3de4ed2fa2f0.exe
Resource
win7-20230220-en
General
-
Target
cbd8b305092414c89d7c5e2b0c4975ea.bin
-
Size
1.9MB
-
MD5
0400ede15bda09c590b823a64b221bb2
-
SHA1
8de0a6c7ad5db3aebe832692e9b68af19c8e7826
-
SHA256
6462bf51b4d88d6013656804c21a535c2d27c09d7dcbdf1f212b10f116c324e5
-
SHA512
6b05cfaaa62559f66bbca2b6a4e1903203bbc80e5cce3a8f38b77abc0d17dc5598ebdc9e90dc7f2cc7016eee1e370b08a14f104104fafe9d51078012473531a7
-
SSDEEP
24576:z2TvLPmDld3Uike6wbPmQl8RY0lwfOYC6jbhN79YuXgliqLVvlhrGB3IYGTJ4Z:qLuBd3Ui7ZIYA1ynz9YuXkPrGeBTJ4Z
Malware Config
Signatures
Files
-
cbd8b305092414c89d7c5e2b0c4975ea.bin.zip
Password: infected
-
2a8fdd6a69c03c5a536b9c560a65b6d25056c69416e952c51e9a3de4ed2fa2f0.exe.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ