Static task
static1
Behavioral task
behavioral1
Sample
adc0e74081dd6c507dda1fbf41a7b9a1386aa4ca58edf5bd0ce3743411b5bc79.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
adc0e74081dd6c507dda1fbf41a7b9a1386aa4ca58edf5bd0ce3743411b5bc79.exe
Resource
win10v2004-20230220-en
General
-
Target
f8ce470d80b71f2872dd43b1733b5e70.bin
-
Size
373KB
-
MD5
f168a802fd6f81174503090bd7f2d00d
-
SHA1
8a928f8a6c4feb8183d10167ce6d5e0f218e1924
-
SHA256
dee57f168c7f727bac9e9ac43d5063e438ce8951c42d394d70262de2facbffe5
-
SHA512
6163346e8e3ead056b5821ada225b7bcb3de83514a07e2b2d3210c65987c6b236af40ccdbd1e53cf749553c03fe8a492426077a64535e29d206df9f6d0dc0d5c
-
SSDEEP
6144:0K/p2lvBSGiGnj//8GrTocZzhtsY/PLGN0oHY8Roko5juGPKAj5FCPK4yOCJ:mOGj/RTo8zhCYk0aXRof5j0eSPryOCJ
Malware Config
Signatures
Files
-
f8ce470d80b71f2872dd43b1733b5e70.bin.zip
Password: infected
-
adc0e74081dd6c507dda1fbf41a7b9a1386aa4ca58edf5bd0ce3743411b5bc79.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 775KB - Virtual size: 774KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 391KB - Virtual size: 391KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ