Static task
static1
Behavioral task
behavioral1
Sample
5da1b3537b33feef0da4adcc435e682b875de40a6e3ce1024a6c5e483bda8ff1.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5da1b3537b33feef0da4adcc435e682b875de40a6e3ce1024a6c5e483bda8ff1.exe
Resource
win10v2004-20230220-en
General
-
Target
5b1f4e2b1ae240311980d2f6186cf88e.bin
-
Size
540KB
-
MD5
de39c8a9b793ec4b804a39842781c725
-
SHA1
7ba266b8ac5be79231b7a549c952dd481d54e43b
-
SHA256
2f88698d6605aa5a9ca6d0ee49228ab4e0c073b5a08096f46895d02f91d71e0c
-
SHA512
f5424d25f75290c964d1802aa30af440f29bc4b4f16e9d4b53030689a5b64eeb96074a1319a2a3b563686dcde8f758c9d393ec132b7d7d30be46c7236f09dd61
-
SSDEEP
12288:7a6vb8ixfIvi1Y9EcxRYelT5hD852MOFf4JU8yrF:2QQufIvOPcJT5FztWaF
Malware Config
Signatures
Files
-
5b1f4e2b1ae240311980d2f6186cf88e.bin.zip
Password: infected
-
5da1b3537b33feef0da4adcc435e682b875de40a6e3ce1024a6c5e483bda8ff1.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ