Static task
static1
Behavioral task
behavioral1
Sample
a4e69739569688ae0ac45d1df9ad6734176d2a5964b1e31cb4f5d2f9fb0e3007.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a4e69739569688ae0ac45d1df9ad6734176d2a5964b1e31cb4f5d2f9fb0e3007.exe
Resource
win10v2004-20230220-en
General
-
Target
0cd0e0d9082391e6f87a8d19823ae186.bin
-
Size
852KB
-
MD5
d1f6f8f182a79197a69165fd654af09f
-
SHA1
fe1b4e41d6c801933d96df8cc0f4de25cd694a0a
-
SHA256
2596109a49602a6d5bd52307fcd8d7bf73c042fc55065aef38230870fbf52716
-
SHA512
e383d32caf552f2451a09412bf08b4c27ccc707e9e8febdbb1a7d9195a5898d1e66cfcd29ddef750bc59f1f0e174f2dbe4edb4d7ff712ea0cef4c0c532ca57e5
-
SSDEEP
24576:IxPjI80LBiSup6o8zoCwp4g/GaO94VL0V9pFQsFhjNdyJ:wcBLBrc6vz5K/GaOmVm9Isf4
Malware Config
Signatures
Files
-
0cd0e0d9082391e6f87a8d19823ae186.bin.zip
Password: infected
-
a4e69739569688ae0ac45d1df9ad6734176d2a5964b1e31cb4f5d2f9fb0e3007.bin.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
Nr:g;7qI Size: 809KB - Virtual size: 809KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ