Static task
static1
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win10v2004-20230220-en
General
-
Target
Payload.exe
-
Size
98KB
-
MD5
c48cad681e84a8c2a138828f2f4b83f0
-
SHA1
f491b7c425d97a96d4b402e45b9ba85eb9ac863c
-
SHA256
705614ccaf3a582c739b93bcb9330e884d12656bc97e9fd4eca6e9d32e038f6f
-
SHA512
ae58e9a39e362398e6fecc0467e3de6ba8b45d86a60d63186d7910a5589351c89fe186579e1d31cea588959b50e1393023e2ea3209390aa8cbc23bb6dce38dad
-
SSDEEP
3072:q9Fm12hxesFkIaiFGbekITgIo3J+fD4MOw5w2Ysl:KmgnFmIfGqNgTZ+fD4y5x
Malware Config
Signatures
Files
-
Payload.exe.exe windows x86
e13c33925aac9b3c5ee3b079f464e9e5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
mscoree
_CorExeMain
Sections
.MPRESS1 Size: 93KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE