Static task
static1
Behavioral task
behavioral1
Sample
9378e9d06e62026de1c1769a92841cbc953f0d66843a1920e731ca76913d89de.exe
Resource
win7-20230220-en
General
-
Target
7470c1b4f6bfd2fdac96719ece0ef928.bin
-
Size
47KB
-
MD5
b2040ac94f0078c1c330f48e218d0243
-
SHA1
bc66984a5e4425630c0f9a7d59ea2dc6330b990f
-
SHA256
fbd32e9d2163847073628b1698893a82a5ff5d453a8c9b467bd64f9e607ca365
-
SHA512
1ee90a99496ef3d4ba5e77d8c39a87d1dde755f7ffb09edc390fd4ac7a0170a11492bd8301e9e68708d817fc42fadb1d1b117d15e3346948251dc7556922041b
-
SSDEEP
768:oPFyCoF0JjBMcZu0qFxX6T5pIIehlUL87IP74c2TpS2eFygwpg5CtVoHrAn45Eok:oPI6JjKcmrXwTehJ7IJFF2gSoLACm
Malware Config
Signatures
Files
-
7470c1b4f6bfd2fdac96719ece0ef928.bin.zip
Password: infected
-
9378e9d06e62026de1c1769a92841cbc953f0d66843a1920e731ca76913d89de.exe.exe windows x86
Password: infected
f323173ecab1c2f1259e450e2662c3c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetProcAddress
CloseHandle
InitializeCriticalSection
TerminateProcess
HeapReAlloc
HeapAlloc
HeapFree
user32
MessageBoxA
Sections
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ