Static task
static1
Behavioral task
behavioral1
Sample
a6f625e40e8b7523312b9a40ce6f3080b3475b9ff349e17785bdf7b6e0cd78c1.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a6f625e40e8b7523312b9a40ce6f3080b3475b9ff349e17785bdf7b6e0cd78c1.exe
Resource
win10v2004-20230220-en
General
-
Target
653b919e0bc78bcda063ac6bf3d6bdab.bin
-
Size
740KB
-
MD5
4dce1fdcdf9bd75ec2382cb086b6083f
-
SHA1
14c8f284d65c7dc05d3828ab9870ecf808839376
-
SHA256
d1d82b8febf37eca46e520cdeb4aefdcd364807613223a9071a6f52805d15d12
-
SHA512
02984943b670a16330a1b14c5420f3b4cc9cfe885c788d9a0e305e65a6b50bb7154bde036c69a322b58621a33267dc4c9a1cbc8c0c9aa2d4666c3a75f1d1b9b9
-
SSDEEP
12288:PBnh+GCnEZtB1bWIEyvL1E8FpJ/VbRL180MC9QyxuI6B8BpkyHC90RMsSUyv/eGt:P10pnEZt8Z8F/tbRpzyID6ynM/Uq9JPR
Malware Config
Signatures
Files
-
653b919e0bc78bcda063ac6bf3d6bdab.bin.zip
Password: infected
-
a6f625e40e8b7523312b9a40ce6f3080b3475b9ff349e17785bdf7b6e0cd78c1.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 915KB - Virtual size: 915KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ