Static task
static1
Behavioral task
behavioral1
Sample
5478f23d8a67ec7f18ee3ebcfefe3d86d89543c6f323b3de5f7696fdd7697cf4.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5478f23d8a67ec7f18ee3ebcfefe3d86d89543c6f323b3de5f7696fdd7697cf4.exe
Resource
win10v2004-20230220-en
General
-
Target
d5bbe92d4a8b9014708e0aa325158e2b.bin
-
Size
187KB
-
MD5
499e8f9aecf31da4e4357279c2478ddf
-
SHA1
3a3f36d45cf1212f6821ceca724a1d814ad01456
-
SHA256
e728fc990c2e7926c775d4dedd4394c78e7d67cebc08b937ae8feec17be0ebeb
-
SHA512
a6a9c0a7a601a3cdac5d269308e8c71230c6b6dabd97811da6eb7a95d76991a286ddd966cb1784405c77ab25fe45adb1e31aa9c86170a3900249159effbc4d82
-
SSDEEP
3072:iNjerhh7hKIwUa/ea76YHKN0qLvPF6XnD9FVzb7WRBufR2cYQy9RYaxbL1iwVQX7:iNjexj2/esHK+uPOnhDzuRYfR2zxv13i
Malware Config
Signatures
Files
-
d5bbe92d4a8b9014708e0aa325158e2b.bin.zip
Password: infected
-
5478f23d8a67ec7f18ee3ebcfefe3d86d89543c6f323b3de5f7696fdd7697cf4.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ