Static task
static1
Behavioral task
behavioral1
Sample
cffa42a53702e4ad0c89048a302c1786d56b10fd42c82cfed5eca5ac473ea483.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cffa42a53702e4ad0c89048a302c1786d56b10fd42c82cfed5eca5ac473ea483.exe
Resource
win10v2004-20230220-en
General
-
Target
b81312b2fd31e53bcfa670d4e9004791.bin
-
Size
216KB
-
MD5
5081803105ea2ba13d51c86284adfb53
-
SHA1
437104a721fe43b47e5bea5d76e1d61598675845
-
SHA256
4e0245e726bf09a5f6ed482bad082e863db387392d95ce2230f52092a407ebdf
-
SHA512
a8c081e238d84f13791fff1a985af580bedd2faa3be140fe3e9d077566a9ab04ea2257c800cdbfdb5054e844c3fed585ed2267409b4c5f6d889acbd8586a7ce8
-
SSDEEP
6144:CheIBjeQStF+BjRkssREVH6UnylGOKQuygW3:OVjeQStUQEzyAbW3
Malware Config
Signatures
Files
-
b81312b2fd31e53bcfa670d4e9004791.bin.zip
Password: infected
-
cffa42a53702e4ad0c89048a302c1786d56b10fd42c82cfed5eca5ac473ea483.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 553KB - Virtual size: 553KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ