Static task
static1
Behavioral task
behavioral1
Sample
f6236859a2510bfecf82dce6d83d07f5caceb021d187e4a5418366878002c4f8.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f6236859a2510bfecf82dce6d83d07f5caceb021d187e4a5418366878002c4f8.exe
Resource
win10v2004-20230220-en
General
-
Target
c38151e14e72c13054ae16636bec5e0d.bin
-
Size
226KB
-
MD5
2fd0cc9102ceaa29a7a7f44e098bcf51
-
SHA1
d7cff03c50e5ea6a066b9ac6263465cca016226c
-
SHA256
cb0ab26929ea540efe9cfebd971f54f3664c87a477ae31aeebed6bf8cf8c94ef
-
SHA512
973c93eece1263a9398afa6d7f80da61084797e06b98871f3ac9c02cb0f6674d3843ea27237fe937c9c7a681693425ff850e97bb93fba2db8db56d788157315f
-
SSDEEP
6144:h2asxDEA0tYkVFeJsomYzXwUq6BeK4BIb:hztYEW/zgUrBeK7b
Malware Config
Signatures
Files
-
c38151e14e72c13054ae16636bec5e0d.bin.zip
Password: infected
-
f6236859a2510bfecf82dce6d83d07f5caceb021d187e4a5418366878002c4f8.bin.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 570KB - Virtual size: 570KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ