Static task
static1
Behavioral task
behavioral1
Sample
f244a04265405ae8295551a1324c6dc3162d611b4a152658096d675a31a57d35.exe
Resource
win7-20230220-en
General
-
Target
15995b0b1fc5dd82f1c3ba1b7b40c5d4.bin
-
Size
1.6MB
-
MD5
30abcba7b287ae28f7aec3b5665a5841
-
SHA1
0c978bd20e220057b1dc450704db161f60c0ee60
-
SHA256
bd4be68e4775c2dfc9218f396b5b616919e4e3341b77414de1b086d58c950b37
-
SHA512
522d04522f97763c98b86ce43c577b08e612172fa0490d4be61ed0b0a1b1073833b461d7fe4ecbc81f8713ec7de6a3ded0b51371adca439fd184791da312a3f3
-
SSDEEP
49152:hAIFeFYd4Du3tQC25TuES6uiTR/XX+Eubk7p:RFbNFr6vX/u6p
Malware Config
Signatures
Files
-
15995b0b1fc5dd82f1c3ba1b7b40c5d4.bin.zip
Password: infected
-
f244a04265405ae8295551a1324c6dc3162d611b4a152658096d675a31a57d35.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ