Static task
static1
Behavioral task
behavioral1
Sample
2477006ed8c89641b3bef2e81c0f018e812fb3242fe521814b3ef58cb00bea81.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2477006ed8c89641b3bef2e81c0f018e812fb3242fe521814b3ef58cb00bea81.exe
Resource
win10v2004-20230221-en
General
-
Target
cd472f6e1e364c0e5f4572b395885d92.bin
-
Size
685KB
-
MD5
68ef766ab26fcf58839127f3aa313c89
-
SHA1
7b0c4d37c5b8c9027587a6e019c544c4be25002a
-
SHA256
57823af56849e982763a8a9b233111fdec6fc3de9ee0c28dd2ef08f7112f8ea0
-
SHA512
cd33bde05b0bd46117b1b2bd5497b7c95939b4441ce5546911eb14eecda4194b3b50907296ee58e1e536771a8693f4777b6afef6f1e4e26597c83bb874b3b51d
-
SSDEEP
12288:HFkOtgyucVH9pzEitVhJxoP9oNGWiKjT1VnucVzUCkCBY14yOPHxb6DydNzC:HFkO6Lcl9pznVJoP6N6KdbhTB/PHB6D/
Malware Config
Signatures
Files
-
cd472f6e1e364c0e5f4572b395885d92.bin.zip
Password: infected
-
2477006ed8c89641b3bef2e81c0f018e812fb3242fe521814b3ef58cb00bea81.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 811KB - Virtual size: 810KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ