Static task
static1
Behavioral task
behavioral1
Sample
b70a16122bd7d485a520eb177209f1c39bd74dbe0ef8502c56a8706f4c9450bc.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b70a16122bd7d485a520eb177209f1c39bd74dbe0ef8502c56a8706f4c9450bc.exe
Resource
win10v2004-20230220-en
General
-
Target
ab92b205a179da227d2e5f7b83a6f251.bin
-
Size
576KB
-
MD5
81d71340a73d8aa0a318be731c897bb8
-
SHA1
848ac5195993f3f966f82684cdc9830b7c8cbe73
-
SHA256
febb9612310a8ebb0d0118448c9a1c689abbb9aa4d25e32c185ae5d5d459f7c7
-
SHA512
b71c272d99549f1ca247d104fffea3bf08a34f5147c7e6aaafc8b9d37f5168ad7c0988b78d1f4a75e2311975f7ba6db96b3b8aff97c44704fd6e969ac6f3abb7
-
SSDEEP
12288:5MCrUg//WqWfR6Zo86E4XSTtQHQcu9niFUX4fabNFsaD6i:5v93NaR6+86EDRQHI4G4Cnt
Malware Config
Signatures
Files
-
ab92b205a179da227d2e5f7b83a6f251.bin.zip
Password: infected
-
b70a16122bd7d485a520eb177209f1c39bd74dbe0ef8502c56a8706f4c9450bc.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 700KB - Virtual size: 700KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ