Static task
static1
Behavioral task
behavioral1
Sample
3ba0e0a20d46ffeda99975fbbb27d535a5cbc149b6b8ee30c66c690e1a71c627.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3ba0e0a20d46ffeda99975fbbb27d535a5cbc149b6b8ee30c66c690e1a71c627.exe
Resource
win10v2004-20230220-en
General
-
Target
03b611bd69f41900407eb6038ec6965f.bin
-
Size
1.1MB
-
MD5
3b23f9225a1769f18892417ceec4350a
-
SHA1
03e44b7237e163576913efcb7967c8bb641be96f
-
SHA256
2c2cf643ca44f6478192237437c0e7d9e7e61e004c985339de20de76ae3688c1
-
SHA512
e347479f517af14bd29590fca13d416cdfba8203e416ad588f2a2a3324941a99afe61a901deb67805f3c95342b4c64c483ca7193db8e229c4857b57fc9a3e800
-
SSDEEP
24576:YkAUvaZXgRRexjhYerjnIdafvhbVIjYXiKQi:/UeW1YMIdEpbVI6
Malware Config
Signatures
Files
-
03b611bd69f41900407eb6038ec6965f.bin.zip
Password: infected
-
3ba0e0a20d46ffeda99975fbbb27d535a5cbc149b6b8ee30c66c690e1a71c627.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ